How to Change Microsoft 365 Passwords Securely
Your Microsoft 365 password protects your work email, files, and everything your organization runs on. It's worth regularly updating, not just when you have forgotten it, but as a simple habit to keep your account secure.
In this page, we will look into how you can change your Microsoft 365 password using the My Account page, and how easier it would be with ManageEngine ADSelfService Plus, an MFA, SSO, and self-service password management solution, that provides the best combination of features to secure Microsoft 365 and Active Directory (AD) users without any inconveniences.
Method 1: How to change Microsoft 365 password using the My Accounts page.
- Log in to your My Account page using your Microsoft 365 user account.
- Select Change Password from the side pane.
- Enter your New password and confirm it.
- Click Submit to change your Microsoft 365 password.
Method 2: How to change Microsoft 365 password using ADSelfService Plus
- Log in to ADSelfService Plus with your Microsoft 365 credentials.
- Navigate to Change Password.
- Type in your Old Password and New Password. ADSelfService Plus enables you to configure your own password policies on top of Microsoft 365's, making your users' passwords even safer.
- After confirming your new password, click Submit to change your Microsoft 365 password.
Note:
- You can set up MFA for Entra ID users with Conditional Access to secure your password resets by reauthenticating you with a stronger factor.
Why IT teams use ADSelfService Plus for password management
ADSelfService Plus is a self-service password management solution for AD and Microsoft Entra ID. It extends password reset and account unlock capabilities to end users across multiple directories from a single point of control.
Additional capabilities of ADSelfService Plus
- Password policy enforcement: Unlike Microsoft 365, ADSelfService Plus lets admins configure custom fine-grained password policies and ensure this software solution enforces those policies during self-service resets.
- Password synchronization across directories: When a user resets their password through ADSelfService Plus, the new password is automatically synced with Microsoft 365, Active Directory, Google Workspace, and other configured applications and so they never have to reset individual passwords.
- MFA prompts at password resets: Users must verify their identity using one or more configured MFA methods before they can reset their password, reducing the risk of unauthorized account access.
- Audit logs: Every password reset and account unlock event is logged with a timestamp, the user's details, and the methods used for verification.
Check out ADSelfService Plus
- Unified identity security for Entra ID: Empower Microsoft Entra ID users with SSPRs, MFA, and SSO for secure cloud identities, seamless cloud applications access, and lower help desk dependency.
- Password self-service: Unburden your users from lengthy help desk calls by empowering them with SSPR and account unlock capabilities.
- MFA: Enable context-based MFA with any of 20 different authentication factors for endpoint, application, VPN, Outlook on the web, and RDP logins.
- One identity with SSO: Get seamless one-click access to more than 100 cloud applications using Microsoft 365 and AD credentials with enterprise SSO.
- Password and account expiration notifications: Notify Microsoft 365 and AD users of their impending password and account expirations via email and SMS notifications.
- Password Policy Enforcer: Strong passwords resist various hacking threats. Ensure that all users in Entra ID and Active Directory follow compliant passwords by displaying password complexity requirements.