Your password
Setting one, changing one, and why an account created through Google may not have a password at all.
Under Security → Privacy & Security, and the panel tells you which of two situations you are in.
You may not have one#
If you signed up with Google or with an email code, your account has no password. That is not a fault - you have simply never needed one.
The panel says which state you are in: "Your account has a password set", or "No password set - you are using social or email OTP login."
Changing it#
Changing a password you already have requires the current one. Setting a first password does not, but it does verify you by code - because at that moment "prove it is you" cannot mean "type the password".
Password rules are shown as you type and are checked identically on the server, so nothing that passes here is rejected on submit.
After a change#
Changing your password does not sign out your other sessions automatically. If you are changing it because you think someone else has access, sign the other sessions out explicitly - see active sessions and login history.
Signing in with several methods#
Having a password does not remove your other options. Google, email code and password all keep working, and you use whichever is convenient. More routes in is more resilience, not less security - the security comes from two-step verification.
Was this page helpful?