> For the complete documentation index, see [llms.txt](https://docs.openiam.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.openiam.com/end-user-guide-for-selfservice/signing-in/forgot-password.md). # If you forgot your password Reset your own password when you cannot sign in, without calling the help desk. You can reset your own password from the sign-in page. You do not need to contact anyone, as long as you have either set your security questions or have access to the email or phone number your organization holds for you. ## Starting the reset {% stepper %} {% step %} **On the sign-in page, choose the forgot-password link.** It sits under the sign-in fields. The exact wording varies with your organization's branding — look for wording about a forgotten or expired password. {% endstep %} {% step %} **Identify yourself.** Enter your user name or your email address, whichever the page asks for. {% endstep %} {% step %} **Prove it is you.** What happens next depends on how your organization set things up. You will meet one of these: * **A secure link by email.** You receive a message containing a one-time link. Open it, and you are taken to a page where you set a new password. * **A short code.** You receive a code by text message, phone call, or email, and type it into the page. * **Your security questions.** You answer the questions you set earlier. See [Setting your security questions](/end-user-guide-for-selfservice/signing-in/security-questions.md). Some organizations combine two of these. {% endstep %} {% step %} **Set your new password.** Type the new password twice. The page shows your organization's rules — minimum length, whether you need numbers or symbols, and whether you may reuse an old password. The **Save** button stays unavailable until the password satisfies every rule. {% endstep %} {% step %} **Sign in with the new password.** Your new password applies everywhere OpenIAM manages your account, not just to SelfService. If your work computer, email, and business applications are connected, the same new password works for them too. {% endstep %} {% endstepper %} ## What the messages mean Some of the wording on these pages is deliberately vague. That is a safety feature, not a mistake. | Message | What it actually means | | ----------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | *"If you have entered a valid email address or user name you will receive a secure link to reset your password."* | The page will not tell you whether the account exists — otherwise a stranger could use it to discover who works here. If nothing arrives, the address was probably wrong. | | *"If the username you entered is valid, you will receive a text message with a password reset code."* | Same idea, for the code-based method. | | *"It could take several minutes to receive your email."* | Wait before trying again. Requesting a second link often invalidates the first. | | *"Answer your challenge questions before using this feature."* | You have not set your security questions yet, so this route is unavailable. Sign in normally if you can and set them, or contact your help desk. | | *"Account is locked. There were too many wrong attempts to answer Security Questions."* | Self-service reset is now closed to you. Only your help desk can unlock the account. | {% hint style="warning" %} The reset link is single-use and expires. If you leave it too long, start again from the sign-in page rather than reusing the old email. {% endhint %} ## If the reset doesn't work * **No email arrived.** Check your spam folder first. If it is genuinely missing, the address your organization holds for you may be out of date — the help desk can check. * **The link says it is invalid or expired.** Request a fresh one; each new request cancels the previous link. * **You are locked out.** Repeated wrong answers lock the account deliberately. Contact your help desk. * **The new password is rejected.** Read the rules shown on the page. The most common causes are reusing a recent password or missing a required character type. If none of these apply, contact your help desk and tell them what the screen said. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://docs.openiam.com/end-user-guide-for-selfservice/signing-in/forgot-password.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.