Maintain your password, authenticator and sessions
Keep your private workspace accessible to you and under your control.
On this page
Before you begin
A current owner session and the current verification requested by the security form.
Steps
Open Settings → Account & data → Security. Find Password, authenticator & sessions, with Recovery codes below it.
Choose Change password. Enter your current password and an authenticator code or unused recovery code, then enter and confirm a new password of 12–200 characters. Other sessions are signed out after the change.
Choose Replace authenticator and verify your current credentials. Scan the new QR code or enter its setup key, then enter a code from the new authenticator and choose Replace authenticator and recovery codes. Complete this in the same session within 10 minutes.
Copy the replacement recovery codes outside this app and choose I saved these codes. Replacing the authenticator retires the old authenticator and codes, and signs out other sessions.
Expand Signed-in sessions. This session identifies the current browser; use Sign out session or Sign out all other sessions and verify your credentials to revoke other sessions.
The separate Recovery codes section replaces only recovery codes. Save the new set before leaving; previous unused codes stop working.
A practical example
When replacing a phone, set up the new authenticator while the old one still works. Verify the replacement, save the new recovery codes and inspect active sessions before removing the old device.
Check the result
The new credentials work and only the intended sessions remain active.
Troubleshooting
Keep the old authenticator until replacement succeeds. Restart a replacement that expired or followed another account change. Five failed security checks within 15 minutes temporarily block more attempts. A recovery code used for verification cannot be used again.