# Your password

> Setting one, changing one, and why an account created through Google may not have a password at all.

Source: https://www.revquix.com/docs/account/your-password
Last verified: 2026-09-03

---

Under **Security → Privacy & Security**, and the panel tells you which of two situations you are in.

## You may not have one

If you signed up with Google or with an email code, **your account has no password**. That is not a
fault - you have simply never needed one.

> **Warning** - Set one anyway
>
> Without a password, your only ways in are the social provider and email codes. If you lose access to
> that Google account, or your email provider has a bad day, you have no second route. Setting a
> password takes a minute and removes a single point of failure you would otherwise discover at the
> worst moment.

The panel says which state you are in: _"Your account has a password set"_, or _"No password set -
you are using social or email OTP login."_

## Changing it

Changing a password you already have requires the current one. Setting a first password does not, but
it does verify you by code - because at that moment "prove it is you" cannot mean "type the password".

Password rules are shown as you type and are checked identically on the server, so nothing that
passes here is rejected on submit.

## After a change

Changing your password does not sign out your other sessions automatically. If you are changing it
because you think someone else has access, **sign the other sessions out explicitly** - see [active sessions and login history](https://www.revquix.com/docs/account/active-sessions-and-login-history).

## Signing in with several methods

Having a password does not remove your other options. Google, email code and password all keep
working, and you use whichever is convenient. More routes in is more resilience, not less security -
the security comes from [two-step verification](https://www.revquix.com/docs/account/two-step-verification).

- [Two-step verification](https://www.revquix.com/docs/account/two-step-verification) - The layer that actually stops account takeover.

- [Sessions and login history](https://www.revquix.com/docs/account/active-sessions-and-login-history) - Checking who is signed in.