Reset Passwords for Your Users
As an admin, you can reset a user’s password for better protection or if they’re locked out.
Required Editions
| Available in: Salesforce Classic and Lightning Experience |
| Available in: Contact Manager, Essentials, Group, Professional, Enterprise, Performance, Unlimited, Developer, and Database.com Editions |
| User Permissions Needed | |
|---|---|
| To reset passwords: | Reset User Passwords and Unlock Users OR Permission to edit the user via the user interface or the API |
To reset a user’s password:
- From Setup, in the Quick Find box, enter Users, then select Users.
- Select the checkbox next to the user’s name. Optionally, to change the passwords for all currently displayed users, check the box in the column header to select all rows.
-
Click Reset Password. The user receives an email that contains a
link and instructions to reset the password.
A password created this way doesn’t expire, but users must change the password the first time they log in.
Review these considerations for resetting passwords.
- Only an admin can reset single sign-on (SSO) user passwords.
- After resetting a password, users are sometimes required to activate their devices to successfully log in to Salesforce.
- Resetting a locked-out user’s password automatically unlocks the user’s account.
- When a user loses a password, they can click the forgot
password link on the login page to receive an email with steps to reset it. The user
must answer the security question correctly to reset the password. In Password Policies,
you can customize the security question page that the user sees with information about
where to go to for help.
Note If the user hasn’t set a security question or doesn’t answer the security question correctly, the password isn’t reset.A user can request to reset a password through the forgot password link a maximum of 10 times in a 1-hour period. They can successfully change their passwords through this link up to 5 times in 1 hour. Administrators can reset a user’s password as often as needed.
- When you reset a user’s password, Salesforce also resets the user’s security token and sends the user an email with the new security token.
- If you reset an API only user’s password, Salesforce doesn't automatically reset the
user’s security token or send a token reset email. If you want API only users to receive a
security token reset email when you reset their password, take these steps.
- Temporarily assign the user to a profile that doesn’t have the API only user permission. For more information on user profiles and permissions, see User Permissions and Access.
- Ask the user to manually reset their security token.
- Reassign the user to a profile with the API only user permission.
- Passwords can’t be reset using the Salesforce mobile app.
- For an internal user, the password reset process verifies their email address. For an external user, such as a customer or partner who accesses Experience Cloud sites, password reset doesn't verify their email address.
Did this article solve your issue?
Let us know so we can improve!
