Short version: you are not missing a magic button, Facebook just spreads the same controls all over. Since @espritlibre and @suenodelbosque already nailed the “where to click,” I’d look at what to do around the password change so you are actually safer afterward.
1. Before you change the password
This is where I slightly disagree with both of them: I’d first check whether the account looks compromised before touching the password, so you know how serious it is.
On desktop or app (wherever you can get in):
- Go to Settings → Security / Password & security area.
- Look at:
- Where you’re logged in
- Recent emails from Meta / Facebook
- Recent logins or login alerts
If you see devices / locations that are obviously not you, treat it like a real breach, not just “someone might know my password.”
2. When you actually change the password
They already gave you the Accounts Center route and the older Security and login path. Two extra tips that people skip:
- Do not reuse any old Facebook password. Meta sometimes flags “previous passwords” but not always.
- Use a password manager so you are not tempted to pick something simple. Even a built‑in manager in your browser is better than memory.
If the interface keeps moving around, the “universal rule” is:
Settings → something named Security / Password / Login → Change password.
If a menu has the word “Security” in it, open it. Facebook likes to reshuffle labels but they all converge to that area.
3. Immediately after you change it
Here is where you really kick people out and lock things down:
-
Log out of all sessions
- Already mentioned by both, but do it after the final password is set.
- If it offers “keep current browser logged in,” say yes only on your main device.
-
Turn on Two factor authentication (2FA)
- Use an authenticator app if at all possible, not SMS.
- If you stick with SMS, at least set a separate strong PIN on your phone account with your carrier so a SIM swap is harder.
-
Turn on login alerts
- Alerts by email and by in‑app notification.
- This gives you early warning if someone guesses or steals your new password later.
4. Check for “side doors” someone could be using
If a stranger had your old password, they might have also:
- Added their own recovery email or phone.
- Added themselves as a trusted contact (older feature but still worth checking).
- Connected weird apps or websites that can see your data.
So, in Settings:
- Look at Contact info: remove anything that is not yours.
- Check Apps and websites / Business integrations: remove old quizzes, “login with Facebook” games, random tools you do not recognize.
- Check Ad accounts / Pages if you manage any. Attackers sometimes try to run ads from compromised accounts.
5. A quick note on the “Forgot password” route
Here I agree more with @espritlibre than @suenodelbosque: if there is any chance you are misremembering your current password, do not keep guessing inside the account. Use:
- Forgot password, reset via email or phone, then log in clean.
Guessing repeatedly just increases lockouts and confusion. Reset once, set a fresh password, then do all the security clean‑up above.
6. Pros & cons of sticking with this built‑in Facebook flow
Since you mentioned changing the Facebook password directly (the “product” here is basically Facebook’s own password change system), here is what you are working with:
Pros
- Integrated directly with your account and Accounts Center.
- Triggers some internal checks and notifications if someone else is trying to get in.
- Works across devices: app or browser.
- Ties neatly into 2FA and login alerts in the same screens.
Cons
- Menus move around constantly, which is exactly why you got lost.
- UI is cluttered; easy to confuse Accounts Center vs old Security and login.
- If your email or phone is compromised, password changes alone do not protect you.
- The flow sometimes insists on the current password, which is annoying if you are just trying to clean up.
7. How this compares to what others suggested
- What @suenodelbosque gave you is the “standard path” as Meta wants you to use it now.
- What @espritlibre added is more of a “backup path” when Meta decides to test a different layout.
Both are correct on the click‑by‑click stuff; the real win is to:
- Change password.
- Log out of all sessions.
- Turn on 2FA and login alerts.
- Clean up recovery options, devices and third‑party apps.
If you walk through those four pieces in order, you are covered even if Facebook moves the “Change password” button again tomorrow.