Azerbaijan, Georgia, Uzbekistan
XcitiumRequest a demo
MenuClose
All materials

Security guide · Account recovery

Change an email password and restore access

Changing a password with the email provider and refreshing the sign-in saved on a phone are separate actions. Secure the provider account first, then reauthenticate in Apple Mail or another mail app.

A laptop showing email, a phone with a sign-in confirmation and a USB security key on a desk

Key takeaway

Change the password only in the provider’s official app or website. Then reauthenticate the account on the iPhone; if the password is forgotten, use the provider’s official recovery process.

Before you begin

Identify whether the account is personal, work or school, and open the provider’s official site yourself; do not blindly follow a password-change link in an email. If you can sign in, change the known password. If you cannot, use the provider’s “forgot password” or account-recovery flow. MFA or a recovery code may be required; never share those codes.

Change the password with the provider

For a Google Account, open the official Google Account security section, select Password and set a new unique password. For a personal Microsoft account, change it through account.microsoft.com; for a work or school account, select Change password at myaccount.microsoft.com or use your organization’s recovery page. For an Apple Account on iPhone, open Settings > your name > Sign-In & Security > Change Password; a security delay may apply. Menu names and available options can vary by account type, region and software version.

Google Account

Google Account > Security & sign-in > Password; changing it may require an active sign-in and additional verification.

Microsoft account

Personal: account.microsoft.com. Work or school: myaccount.microsoft.com or your organization’s recovery flow.

Apple Account

On iPhone: Settings > your name > Sign-In & Security > Change Password. A device security delay may apply.

Refresh the sign-in on your iPhone

After the provider password changes, iPhone Mail may continue using an old session or ask you to sign in again. Select the account under Settings > Apps > Mail > Mail Accounts; if the provider’s secure sign-in page opens, authenticate there. Apple Mail menus and provider flows can change, so follow the official prompts shown on your device. Remove and add the account again only if reauthentication fails and you understand the effect on synced data.

Account typeWhere the password changesNext step on iPhone
Apple Account / iCloud MailApple Account security settingsOther Apple devices may remain signed in or require a new sign-in, depending on the option you choose. Complete any sign-in and verification prompts.
Google, Microsoft, Yahoo and other providersProvider’s official account portalReauthenticate under Mail Accounts; menus may differ on older iOS versions.
Custom IMAP/SMTP accountProvider or organization account portalIf an app password or IMAP/SMTP server setting is required, follow the provider’s or administrator’s documentation.

If the account looks compromised, complete recovery

Change the password from a trusted device, sign out other sessions separately in the provider account, and check recovery email and phone. Remove unknown devices and third-party app access; review mail forwarding, filters and sender identities. Enable MFA and, where available, choose a phishing-resistant passkey or security key. Notify your organization’s administrator for a work account; if the device may be compromised, do not re-enter the password on that device.

Use the official recovery route if you forgot the password

For Google, open accounts.google.com/signin/recovery and answer the prompts to verify the account. For Apple, try resetting the password on a trusted device; if that is not possible, start recovery at iforgot.apple.com, which can take time. For a personal Microsoft account, select “Forgot password?” or use aka.ms/sign-in-helper. For a work or school account, the organization’s SSPR page, including passwordreset.microsoftonline.com, works only if the organization enabled it and you enrolled; otherwise contact the administrator. Do not share your password, recovery code or one-time verification code with anyone claiming to provide support.

Google Account recovery

Open accounts.google.com/signin/recovery; when possible, use a familiar device and usual sign-in location.

Apple Account recovery

Try a reset on a trusted device; if that fails, use iforgot.apple.com and follow the stated waiting period.

Microsoft account

Use Microsoft Sign-in Helper for personal accounts; use your organization’s SSPR service or administrator for work and school accounts.

Frequently asked questions

Should I change the password in the Mail app?

No. Change the password with the email provider, then confirm the new sign-in in Mail through the provider’s sign-in page or account settings.

What if I cannot sign in to a work account?

Use your organization’s self-service recovery page or contact its IT administrator. Work and school accounts may follow different rules from personal Microsoft or Google accounts.

When should I remove and add the account again?

Only after confirming that provider sign-in works and the device’s reauthentication steps have failed. Removing the account from a phone does not close the mailbox, though it may affect locally synced data.