Reset microsoft 365 password

Who this is for: anyone with a work email account. The last section is for owners and admins.

The short answer

Go to passwordreset.microsoftonline.com, enter your work email, and follow the verification prompts. If that page says your account isn't set up for self-service reset, your administrator has to reset it for you.

Reset your own password

1. Open passwordreset.microsoftonline.com in a browser. Use a private/incognito window if you share the computer.
2. Type your full work email address and the characters shown in the image.
3. Choose how you want to verify: a text message, a phone call, an alternate email, or a code from the Microsoft Authenticator app.
4. Enter the code you receive.
5. Choose a new password. It must be at least 8 characters and can't be one you've used recently.

After you change it, you will be signed out on every device. Expect to re-enter the new password on your phone's mail app, on Teams, and on any desktop Office apps.

If the reset page won't let you in

• "Your account is not enabled for password reset." Self-service reset hasn't been turned on for your organization, or your account has no verification methods on file. An admin will need to reset it.
• You no longer have the phone number on file. There is no way around this yourself. Contact your admin.
• The code never arrives. Check your junk folder for email codes. For text codes, wait two full minutes before requesting another — requesting repeatedly can invalidate earlier codes.

Change a password you still know

If you simply want a new password and you can still sign in, don't use the reset flow. Sign in to office.com, click your initials or photo in the top right, choose View account, then Password.

For admins: turning on self-service password reset

Self-service reset removes the most common ticket in any small office. It requires Entra ID P1 licensing, which is included in Microsoft 365 Business Premium.

1. Sign in to the Microsoft Entra admin center as a Global Administrator.
2. Go to Protection → Password reset.
3. Set Self service password reset enabled to All, or to a selected group if you want to pilot it first.
4. Under Authentication methods, require at least two methods. The Microsoft Authenticator app plus mobile phone is a reasonable pair.
5. Under Registration, require users to register when signing in, with a re-confirmation interval of 180 days.
6. Under Notifications, turn on notifications to users on reset, and to all admins when an admin resets their own password.

Give staff a week's notice before you turn on forced registration, or your next Monday morning will be busy.