The Security screen brings together your password, your access methods and your open sessions. That is where you change a password you still know, and where you end an access you do not recognise.
Step by step
Changing the password and ending sessions are two actions on the same screen, and it is worth doing both when you suspect someone else got in.
- Sign in and open Security.
- Choose to change the password.
- Type your current password and then the new one.
- Save.
- Go back to Security and look at the active sessions list.
- End the session you do not recognise.
Important points
That field exists so nobody sitting at your device can change the password without knowing the old one. If you cannot remember it, use password recovery instead of this screen.
The screen rejects shorter passwords before saving, and the hint next to the field says so.
The active sessions list helps you tell your own access apart. An unknown one is reason enough to end that session and change your password right after.
The menu in the sessions section offers ending every other session, keeping yours, or ending all of them. Ending all signs you out too and returns you to the sign-in screen.
Accounts created with Google or a wallet show a new password field on the Security screen. Once created, you can also sign in with email and password.
When that happens, the change password screen opens by itself with different wording, and the rest of the site waits. Finish the change to carry on browsing.
Without the correct current password, the change is refused, even with the session open. That protects the account from whoever sits at your already signed in device.
Every other device has to sign in again, and you stay where you are. That differs from the reset by link, which ends everything, including the current session.
Someone who created the account with Google or a wallet has no password yet. In that case, the path in Security is to set a password, not to change it.
The event enters the account activity history, along with the fact that the other sessions were ended.
Common problems
The current password field was typed wrongly. Check the capitals and your keyboard layout. If you genuinely cannot remember it, leave this screen and use password recovery.
Change the password, end the other sessions, and review the access methods that are connected. After that, open a support ticket describing what happened.
Your account is flagged to change the password before continuing. That usually follows a security action. Set the new password and browsing goes back to normal.
Yes. Ending all sessions includes the one you are using. Sign in again with your password and carry on.
The account needs at least one way in. Create a password or connect another method before disconnecting the current one.
The screen shows a notice with a retry button. Use it. If it keeps failing, check your connection and reload the page.
Ending sessions is a separate action from changing the password, done on the same screen. Use the sessions menu to close whatever is left.
Yes. The change keeps the session where you made it and ends the others.
Not here. Use email recovery, which resets the password without asking for the current one and ends every session.