Set or change your password

Where the password screen is on each app, what the minimum is, and why an account that signed up with Google or Apple has no password at all until you set one.

A password is the way in that works everywhere, because the email-and-password form is on the website and on both apps. An account made with Google or Apple has no password at all until somebody sets one — nothing is wrong with the account, it simply has nothing to type into that form — so the one screen below does two jobs, and which one you get depends on whether there is a password on the account already.

On your phone

  1. On Home, tap your initial in the top right to open Profile.
  2. Under ACCOUNT, tap Password. The row reads Set or Not set, which is how you find out whether this account has a password at all.
  3. YOUR SIGN-IN EMAIL is at the top of the screen and is selectable, so you can copy it rather than retype it.
  4. With a password already on the account: CURRENT PASSWORD, then NEW PASSWORD and Confirm new password — At least 8 characters, and Show reveals it. Tap Change password. If you cannot remember the current one, the line under that box says "Forgotten it? Use "Forgot password?" on the website's sign-in screen."
  5. With no password yet: NEW PASSWORD, Confirm new password, Set password. Nothing asks you for a current password you do not have.
  6. "Password changed" confirms it, and adds "Any other phones or browsers signed in to your account have been signed out." when that is what happened. This phone is not one of them — it stays signed in.
  7. Sign out other devices is the next row down, beside Password rather than inside it, so it is reachable on an account that has no password to change.

On the web

  1. Open Profile. On a wide window, click your name at the foot of the sidebar and choose Profile, the first item in the menu. On a narrower window it is the round button with your initial in the top right-hand corner.
  2. Find the Account card, low in the right-hand column on a wide window. Password is the first row in it, under "Set or change the password you use to sign in with your email address."
  3. The screen opens on YOUR SIGN-IN EMAIL, which is the address to type beside the password. Read it rather than assuming it, especially if you signed up with Apple.
  4. If the account already has a password the form asks for CURRENT PASSWORD first, then NEW PASSWORD and Confirm new password. The box says At least 8 characters, and Show spells out what you are typing. Click Change password.
  5. If it has never had one there is no current-password box — being signed in is the proof — so it is NEW PASSWORD, Confirm new password and Set password.
  6. Either way this browser is signed out when it saves: the confirmation says "You've been signed out on this browser too. Sign in again with your new password." and "Any other phones or browsers signed in to your account have been signed out.", with a Sign in again button under them.
  7. Sign out other devices sits in the same card, directly under Password. That is the one to use when the worry is a handset you no longer have rather than the password itself.

The current password is asked for because a borrowed unlocked phone should not be able to lock you out of your own account. Getting it wrong is only a message — it never signs you out, which is deliberate: an app that treated a mistyped password as a dead session would throw you out for a typo.

Saving a password ends every other session on the account, on purpose. A phone you sold, a browser at work, anyone who has your old password: all of them stop working at the moment you save, and nothing can renew them afterwards. What it cannot do is end one session and leave the rest — it is all of them or none, which is why Sign out other devices does the same thing from the other direction and why neither control can single out one lost phone.

Eight characters is the minimum everywhere a password is set — signing up, this screen, and the emailed reset form all use the same floor. A shorter password set before that floor existed still signs in; nothing was expired and nobody was locked out.

If you have forgotten it altogether, ask for a reset from either sign-in screen. The email it sends you opens the website, where you set the new one.

On your phone

  1. Tap Forgot password? under the password box on the sign-in screen. It opens that same page on slugstats.com in your browser, because the whole reset happens on the website.
  2. Finish it there, then come back to the app and Sign In with the new password.

On the web

  1. On the sign-in page, click Forgot password? under the password box. The page that opens is headed Reset Password, with "Enter your email to receive a reset link" under it.
  2. Type the address the account uses and click Send Reset Link. Whatever you type, the page answers "If an account exists with that email, we've sent a password reset link. Check your inbox." — it will not tell a stranger which addresses have accounts.
  3. Open the link in the email. It lands on Set New Password, which takes the new password twice and saves it with Reset Password. The link is single-use and expires, so request a fresh one rather than reusing an old email.
  4. Then Sign In with the new password.

One trap in that flow is worth knowing about: an account with no password gets no email. The reset deliberately refuses an account that has only Apple or Google authentication — otherwise anyone holding your inbox could mint a password on an account that was never protected by one — and the page says the same reassuring sentence either way, so nothing on screen tells you that is what happened. If you asked for a link, nothing arrived, and you signed up with Google or Apple, that is why: set a password from inside the app with the steps above instead.

Related guides

Still stuck?

Try the rest of the guides or the support page. Sending feedback from inside the app reaches a real person.