An Amazon account is a wallet with a search bar. Stored cards, one-click ordering, gift-card balances, and - For many households - Prime Video, Kindle, and Alexa devices all hang off one login. That makes it a prime target for two attack styles: credential stuffing, where passwords leaked from other sites are replayed against Amazon at scale, and phishing email shaped like "there's a problem with your order" or "your account is on hold." If your Amazon password is reused anywhere else, appeared in a breach, or is old enough to have shipped with your first order a decade ago, replace it now - The whole process, including cleanup, fits in ten minutes.
Change Your Amazon Password on the Web
On amazon.com (the path is the same on international Amazon sites):
- Sign in, hover over Accounts & Lists, and click Account.
- Open Login & Security.
- Amazon re-verifies your identity - Usually by re-entering your password or a one-time code sent to your phone or email.
- Next to Password, click Edit.
- Enter the current password, the new one twice, and click Save changes.
Amazon accepts passwords as short as 6 characters, which tells you nothing about what's safe - A 6-character password falls to modern hardware effectively instantly, as the crack-time math in how long should a password be makes uncomfortably clear. Generate 16+ random characters with a password generator and let your browser or manager remember it; you almost never type an Amazon password by hand anyway.
Change It in the Mobile App
The shopping app reaches the same settings screen:
- Open the Amazon app and tap the account/profile icon in the bottom bar.
- Tap Your Account (or open the menu and find Account settings).
- Tap Login & Security and re-verify your identity if prompted.
- Tap Edit next to Password, enter old and new, and save.
The change applies account-wide instantly - The website, the shopping app, Prime Video, Kindle, Audible, and Alexa all use the same Amazon login, so there's exactly one password to get right.
If You've Forgotten Your Password
From any Amazon sign-in screen:
- Enter your email or phone number, then choose Forgot password? (Amazon labels the flow "Password assistance").
- Amazon sends a one-time code (OTP) to your registered email address or mobile number.
- Enter the code, then set and confirm the new password.
If you can't receive the code - Old phone number, dead email - The password-assistance flow offers additional verification, which can include confirming details like a card on file. Persistent lockouts go through Amazon's account recovery, and it genuinely helps to start from a device or home network Amazon has seen before. One firm warning: Amazon-themed phishing is among the most common in the world. Real password resets happen only on the amazon.com domain (or your country's equivalent) - Never through a link in a text message about a package you don't remember, a technique that leans on urgency the way all social engineering does.
If an email says your Amazon account is locked, don't click anything in it. Type amazon.com yourself and look - A real problem will greet you right on the site.
After You Change It
| Task | Where | Why |
|---|---|---|
| Sign out everywhere | Login & Security → Secure Your Account / sign out all devices | Clears sessions on browsers, apps, TVs, and Alexa devices |
| Enable 2-step verification | Login & Security → 2-step verification | Stolen passwords stop being sufficient |
| Review recent orders and addresses | Your Account → Orders / Addresses | Spots gift-card buys or a planted delivery address |
| Check gift-card balance and payment methods | Your Account → Payments | Attackers drain value through gift cards first |
| Update your password manager | Your vault | Keeps autofill correct across Amazon's many apps |
Amazon's sign-out-everywhere control matters more here than on most platforms because Amazon sessions live on so many long-lived devices - Fire TVs, Kindles, Echo speakers, a work browser you forgot about. After the sweep, turn on 2-step verification: Amazon supports authenticator-app codes as well as SMS, and the app option is the stronger one (our TOTP generator shows exactly how those rotating codes work; the practical differences are in TOTP vs SMS 2FA).
Then spend two minutes on fraud triage. Check order history for purchases you didn't make - Gift cards are the classic first move, since they turn account access into untraceable value - And check saved addresses for entries you don't recognize. If the old password was shared with other sites, remember why you're here: credential stuffing is precisely the attack that turns one breached forum password into a drained Amazon account, and every other site still using that password remains exposed until you replace it there too.
FAQ
Does changing my Amazon password sign me out of my devices?
Not automatically on every device. Use the sign-out-everywhere option in Login & Security (or deregister devices under Your Devices) to clear sessions on browsers, apps, Fire TVs, Kindles, and Echo devices. If you suspect someone else had access, do this immediately after the password change.
Why did Amazon ask me for a one-time code before letting me change settings?
Login & Security is gated behind re-verification: Amazon confirms you're the account owner by password or a code sent to your registered email or phone. It's normal, and it's also why keeping those contact details current matters - They're the fallback keys to your account.
Someone ordered things on my Amazon account - What do I do?
Change the password, sign out all devices, and enable 2-step verification first, then report the unauthorized orders through Amazon's customer service so they can reverse charges and investigate. Also check for planted delivery addresses, unfamiliar payment methods, and drained gift-card balance, and change the password on your email account if it shared the same one.
Is one password really used for Prime Video, Kindle, and Alexa too?
Yes - All Amazon services share your single Amazon login. That's convenient, but it concentrates risk: one weak password exposes your shopping, your smart speakers, and your reading library at once. Make it long, random, unique, and backed by 2-step verification.