How to Change Your Password

Changing your password regularly is one of the easiest ways to protect your account. Both the web and the app ask you to confirm your current password before the new one is saved.

On the web

1. Sign in and open Security in the account sidebar (/account/security).
2. On the Password card, select Change Password (opens /account/security/password).

3. Enter your New Password.
4. Enter Confirm Password.
5. Select Change Password.
6. In the Confirm Your Password dialog, enter your current password, then confirm to continue.
7. When the change succeeds, you return to the Security page.

Your new password needs at least 8 characters, plus lowercase, uppercase, a number, and a special character (for example !, @, or #). The on-screen hints do not currently list the special-character rule, so add one even though the hints do not ask for it — otherwise the form rejects the password without explaining why.

In the app

1. Open the main menu → Account → Security.
2. Tap Change Password.
3. Enter your new password and confirm it.
4. Tap Change Password.
5. In the Confirm Your Password dialog, enter your current password to continue.
6. When the change succeeds, you return to Security.

If you signed up with Google or Facebook

Accounts created through Google or Facebook do not have a password at all, so there is nothing to confirm. The Security page shows Set Password instead of Change Password, with the note "No password yet — you sign in with a connected account."

Two things can stop the email:

• "Verify your email address first." This link sets the only password on your account, so we need to know the address belongs to you. Verify your email from Account, then come back. (Facebook sign-ups are the usual cause — Facebook does not always confirm the address with us.)
• "Your account already has a password." Use Change Password instead.

Until you set one, a few things stay out of reach because they all ask you to confirm your password first: turning two-factor authentication off, viewing or regenerating recovery codes, and disconnecting a connected account. Each screen tells you to set a password first and links you here. Connecting an extra account still works — that is the one action you can take without a password, so you always have a way to add a backup sign-in method.

After you change it

Every other device signed in to your account is signed out and must sign in again with the new password. The device you used stays signed in.

The Security page updates the password-age line:

• On the web: Last changed: {{date}} (or Last changed: Never if it was never changed).
• In the app: Last changed {{time}} (or Never changed).

Tips for a strong password

• Use at least 8 characters. Longer is better.
• Mix uppercase and lowercase letters and numbers (match the on-screen hints).
• Avoid common words or personal details like your name or birthday.
• Do not reuse passwords from other accounts.
• If you forget your password while signed out, use Forgot Password.

Edge cases

• Current password asked unless confirmed in the last 3 hours; a wrong one is refused.
• No password yet: accounts made with Google, Facebook or Apple use Set password to get an emailed link, which needs a confirmed email.
• Link limits: five an hour per account and one a minute.

Related guides

• Account Overview