How to Change Your Email Password

Editorial Team·27 days ago

016511 minutes read

Quick answer: To change your email password in Gmail, go to myaccount.google.com > Security > Password. For Outlook, go to account.microsoft.com > Security > Change my password. For Yahoo, go to account.yahoo.com > Security > Change password. For iCloud, go to appleid.apple.com > Sign-In and Security > Password. After changing, update the password in any email clients or apps using the account.

"My Email Was Accessed Without My Permission" — When and How to Change Your Email Password

Changing an email password is one of the most straightforward security actions available — but knowing when to do it, and what to do after, is as important as the change itself. A password change alone does not fully secure a compromised account if the attacker has also added forwarding rules, connected malicious apps, or changed recovery options. And after changing the password, any devices or apps configured with the old password will stop working until updated. Understanding the full process — not just the password change step — leads to better outcomes. This guide covers how to change an email password in Gmail, Outlook, Yahoo Mail, and iCloud — including step-by-step instructions, what to do after changing the password, and when to change it immediately. Account security interfaces change over time; the steps here reflect current interfaces as of mid-2026, and checking the provider's current security documentation if steps differ is recommended.

When to Change Your Email Password — 5 Situations

SituationUrgencyAdditional Steps NeededSigns of unauthorized account accessImmediateEnable 2FA, review connected apps, check forwarding rulesEmail address in a data breachSoonChange password on other accounts using the same passwordSame password used on a breached serviceSoonChange password on all accounts using the same passwordPassword shared with someone who should no longer have accessSoonReview connected apps; revoke any shared accessRoutine periodic password updateLow urgencyUpdate password in email clients and password manager

1. How to Change Your Gmail Password

To change a Gmail password: go to myaccount.google.com in a browser and sign in. Click "Security" in the left navigation menu. Under the "How you sign in to Google" section, click "Password". Google may ask to verify identity before allowing the password change — this may involve entering the current password, approving a prompt on a trusted device, or completing a 2FA step. After verification, enter the new password in the "New password" field and again in the "Confirm new password" field. Click "Change Password". The new password takes effect immediately. After changing the Gmail password, any email clients configured with the account using IMAP/SMTP (Outlook desktop, Apple Mail, Thunderbird, mobile mail apps) will prompt for the new password or show an authentication error. Update the password in each client. Note that if 2-Step Verification is enabled and app passwords were generated for third-party apps, those app passwords remain valid after a regular password change — they only need to be revoked if they were compromised. App passwords can be managed at myaccount.google.com > Security > 2-Step Verification > App passwords.

2. How to Change Your Outlook or Microsoft Account Password

To change an Outlook.com or Microsoft account password: go to account.microsoft.com in a browser and sign in. Click "Security" in the top navigation bar. Click "Change my password". Enter the current password, then enter and confirm the new password. Microsoft may offer an option to make the password expire periodically — this is optional. Click "Save". The new password takes effect immediately. For Microsoft 365 organizational accounts (work or school accounts), the password change process may differ — it may be managed through the organization's identity portal (often at myaccount.microsoft.com or a custom URL provided by the IT department), or the IT administrator may need to reset the password. After changing the Microsoft account password, update the password in the Outlook desktop application (File > Account Settings > Account Settings > select the account > Change > update the password), in the Outlook mobile app (the app will prompt for the new password), and in any other email clients configured with the account. If the account uses modern authentication (OAuth), the apps may prompt for re-authentication rather than a password entry.

3. How to Change Your Yahoo Mail Password

To change a Yahoo Mail password: go to account.yahoo.com in a browser and sign in. Click "Security" in the left navigation. Click "Change password". Yahoo may ask to verify identity — complete the verification step. Enter the new password and confirm it. Click "Continue". The new password takes effect immediately. If Yahoo Mail is configured in a third-party email client (Gmail app, Apple Mail, Outlook) using an app password, the app password remains valid after a regular password change — app passwords are separate from the account password. App passwords can be managed at account.yahoo.com > Security > Generate app password (existing app passwords can be revoked from the same location).

4. How to Change Your iCloud / Apple ID Password

To change an iCloud or Apple ID password: go to appleid.apple.com in a browser and sign in. Click "Sign-In and Security" in the left navigation. Click "Password". Enter the current password, then enter and confirm the new password. Click "Change Password". Alternatively, on an iPhone or iPad: go to Settings > tap the name at the top > Sign-In & Security > Change Password. On a Mac: go to System Settings > Apple ID > Sign-In & Security > Change Password. After changing the Apple ID password, devices signed in with the Apple ID will prompt for the new password. App-specific passwords (used for third-party email clients accessing iCloud Mail) are automatically revoked when the Apple ID password is changed — new app-specific passwords must be generated for any third-party apps that access iCloud Mail.

5. What to Do After Changing a Password in a Compromise Scenario

⚠️ Changing the password alone is not sufficient if the account was compromised — attackers often leave persistent access mechanisms: If the password was changed because of suspected unauthorized access, additional steps are essential. Review connected third-party apps and revoke access for any that are unrecognized (Gmail: myaccount.google.com/permissions; Microsoft: account.microsoft.com > Privacy > Apps and services). Check for unauthorized forwarding rules or filters that may have been added by the attacker (Gmail: Settings > See all settings > Filters and Forwarding; Outlook: Settings > Mail > Rules and Forwarding). Check the Sent folder for emails sent without authorization and notify affected contacts. Review account activity for the period of suspected compromise (Gmail: inbox bottom > Details; Microsoft: account.microsoft.com/security > Review activity). Enable two-factor authentication if not already active. Update recovery options (backup email, phone number) to ensure they are current and secure.

Step-by-Step: How to Change Your Gmail Password

Step 1: Go to Google Account Security Settings

Open a browser and go to myaccount.google.com. Sign in with the Gmail address and current password if not already signed in. In the left navigation menu, click "Security". The Security page shows an overview of the account's security settings, including sign-in methods, connected devices, and recent security activity.

Step 2: Find and Click "Password"

On the Security page, find the "How you sign in to Google" section. Click "Password" (it shows the date the password was last changed). Google will ask to verify identity before allowing the password change — this is a security measure to prevent unauthorized password changes. Complete the verification step: enter the current password, approve a prompt on a trusted device, or complete a 2FA step, depending on the account's security settings.

Step 3: Enter and Confirm the New Password

On the password change screen, enter the new password in the "New password" field. The password should be strong — at least 16 characters, random, and not used on any other service. A password manager can generate and store a strong random password. Enter the same password again in the "Confirm new password" field. Google will show a strength indicator — aim for a strong rating. Click "Change Password".

Step 4: Update the Password in Email Clients and Apps

After the password is changed, any email clients or apps configured with the Gmail account using IMAP/SMTP will show an authentication error or prompt for the new password. Update the password in each: in the Outlook desktop app, go to File > Account Settings > select the Gmail account > Change > update the password; in Apple Mail, the app will prompt for the new password when it attempts to sync; in mobile mail apps, go to the account settings and update the password. If the Gmail account was added using the Google sign-in flow (OAuth) rather than IMAP credentials, the apps may prompt for re-authentication rather than a password entry.

Step 5: Update the Password Manager and Review Security Settings

Update the new password in the password manager being used. If the same password was used on other services (which is not recommended — each service should have a unique password), change those passwords as well. Review the account's security settings: confirm that 2-Step Verification is enabled, that recovery options (backup email, phone number) are current, and that no unrecognized devices are listed under "Your devices" in the Google account security settings.

Frequently Asked Questions — How to Change Your Email Password

How do I change my email password?

Gmail: myaccount.google.com > Security > Password. Outlook / Microsoft: account.microsoft.com > Security > Change my password. Yahoo: account.yahoo.com > Security > Change password. iCloud: appleid.apple.com > Sign-In and Security > Password. After changing, update the password in any email clients or apps using the account.

How do I change my Gmail password?

Go to myaccount.google.com > Security > Password. Verify identity when prompted. Enter and confirm the new password > Change Password. Update the password in any IMAP/SMTP email clients. App passwords (for 2FA accounts) remain valid after a regular password change and do not need to be regenerated unless compromised.

How do I change my Outlook or Microsoft account password?

Go to account.microsoft.com > Security > Change my password. Enter the current password, then the new password, and save. For Microsoft 365 organizational accounts, the process may be managed through the organization's identity portal or by the IT administrator. Update the password in the Outlook desktop app and mobile app after changing.

What should I do after changing my email password?

Update the password in all email clients and apps using the account. If the change was due to a suspected compromise: also review connected apps, check for unauthorized forwarding rules or filters, check the Sent folder, review account activity, and enable 2FA if not already active. Update the password in the password manager.

When should I change my email password immediately?

Change immediately if: the account shows signs of unauthorized access; the email address appears in a data breach (check haveibeenpwned.com); the same password was used on a breached service; or credentials may have been captured by phishing. After changing in a compromise scenario, also enable 2FA, review connected apps, and check for unauthorized forwarding rules.

Conclusion & My Take

Changing an email password is a straightforward process in all major email providers, but the steps after the change — updating email clients, reviewing connected apps, and checking for persistent attacker access in a compromise scenario — are equally important. A password change that is not followed by a review of connected apps and forwarding rules may leave an attacker with continued access to the account through those mechanisms. For routine password changes (not in response to a suspected compromise), the main follow-up task is updating the password in any email clients configured with the account. For iCloud accounts specifically, note that app-specific passwords are automatically revoked when the Apple ID password is changed — new app passwords must be generated for any third-party apps that access iCloud Mail. The most important long-term password practice is using a unique password for each service — stored in a password manager — so that a breach of one service does not expose the email account. Combined with two-factor authentication, this provides strong protection against the most common account compromise scenarios.