How to Change Your Password
Changing your password regularly is one of the easiest ways to protect your account. Both the web and the app ask you to confirm your current password before the new one is saved.
On the web
- Sign in and open Security in the account sidebar (
/account/security). - On the Password card, select Change Password (opens
/account/security/password).
- Enter your New Password.
- Enter Confirm Password.
- Select Change Password.
- In the Confirm Your Password dialog, enter your current password, then confirm to continue.
- When the change succeeds, you return to the Security page.
Your new password needs at least 8 characters, plus lowercase, uppercase, a number, and a special character (for example !, @, or #). The on-screen hints do not currently list the special-character rule, so add one even though the hints do not ask for it — otherwise the form rejects the password without explaining why.
In the app
- Open the main menu → Account → Security.
- Tap Change Password.
- Enter your new password and confirm it.
- Tap Change Password.
- In the Confirm Your Password dialog, enter your current password to continue.
- When the change succeeds, you return to Security.
If you signed up with Google or Facebook
Accounts created through Google or Facebook do not have a password at all, so there is nothing to confirm. The Security page shows Set Password instead of Change Password, with the note "No password yet — you sign in with a connected account."
Open Security and choose Set Password
On the web that is /account/security; in the app it is the main menu →
Account → Security.
Send yourself the link
Select Email me a link. We send it to your account's email address. The
link is valid for 60 minutes and can only be used once.
Open the link and choose your password
The link opens the reset page in your browser. Enter your new password twice
and save.
We send a link instead of asking you to pick a password on the spot because
there is no existing password to prove it is really you. Opening the emailed
link is what proves it.
Two things can stop the email:
- "Verify your email address first." This link sets the only password on your account, so we need to know the address belongs to you. Verify your email from Account, then come back. (Facebook sign-ups are the usual cause — Facebook does not always confirm the address with us.)
- "Your account already has a password." Use Change Password instead.
Until you set one, a few things stay out of reach because they all ask you to confirm your password first: turning two-factor authentication off, viewing or regenerating recovery codes, and disconnecting a connected account. Each screen tells you to set a password first and links you here. Connecting an extra account still works — that is the one action you can take without a password, so you always have a way to add a backup sign-in method.
After you change it
The Security page updates the password-age line:
- On the web: Last changed:
{{date}}(or Last changed: Never if it was never changed). - In the app: Last changed
{{time}}(or Never changed).
Tips for a strong password
- Use at least 8 characters. Longer is better.
- Mix uppercase and lowercase letters and numbers (match the on-screen hints).
- Avoid common words or personal details like your name or birthday.
- Do not reuse passwords from other accounts.
- If you forget your password while signed out, use Forgot Password.