Updating your PayPal password regularly, or right after any security scare, helps keep your money and linked accounts safe. You can change it in a few steps from the website or the mobile app.
What you'll need
- Your current PayPal login
- Access to your account email or phone for verification
Step by step
- Log in to PayPalSign in at the PayPal website or open the app with your current email and password.
- Open SettingsClick the gear icon near the top on the website, or tap your profile and then Settings in the app.
- Go to SecurityFind the Security section and look for the Password option, which shows when it was last changed.
- Choose Update passwordClick Update next to Password. You will be asked to enter your current password first to confirm it is you.
- Enter a new passwordType a strong new password, then retype it to confirm. Use a mix of letters, numbers, and symbols that you do not use on other sites.
- Save and confirmSave the change. PayPal may email you a confirmation, and you may need to log in again on your devices with the new password.
Handy tips
- Turn on two-factor authentication in the Security settings so a stolen password alone cannot unlock your account.
- A password manager can generate and store a long, unique password so you do not have to remember it.
- Change your password from your own trusted device and network rather than public Wi-Fi.
Heads up
- Never change your password by clicking a link in an unexpected email or text. Go directly to the official PayPal site or app, since scam links can steal your login.
FAQ
What if I forgot my current password?
On the login page, click Forgot password and follow the prompts to verify your identity by email or phone, then set a new one.
How often should I change my PayPal password?
There is no strict rule, but change it right away if you suspect any breach, reused it elsewhere, or received a suspicious login alert.
Will changing my password log me out everywhere?
It often signs you out of active sessions on other devices, which is useful if you think someone else had access. You then log back in with the new password.