Skip to content
7 min fix 5 min read Recently reviewedBeginner
Quick Answer

Go to aka.ms/setupsecurityinfo, sign in, click Add sign-in method, and register a phone number (for text messages) and the Microsoft Authenticator app.

How to Set Up Self-Service Password Reset (SSPR)

Applies to: Microsoft 365, Azure AD / Entra ID
Article Type: How-To
Last Updated: 2026-05-14

Summary

This article shows you how to register your authentication methods for Self-Service Password Reset (SSPR) so you can reset a forgotten password on your own — without calling the helpdesk.

Prerequisites

  • A Microsoft 365 work or school account.
  • Your organization must have SSPR enabled (most organizations do).
  • Access to at least one of: a mobile phone, the Microsoft Authenticator app, or a personal email address.

Instructions

1. Register Your Authentication Methods

Set up at least one recovery method before you can use SSPR. Do this now so you are prepared if you ever forget your password.

  1. Open a browser and go to https://aka.ms/setupsecurityinfo.
  2. Sign in with your work email and current password.
  3. You will see the Security info page. Click + Add sign-in method.
  4. Choose a method from the dropdown:
    • Phone — Receive a text message or phone call with a verification code.
    • Authenticator app — Use the Microsoft Authenticator app for push notifications or one-time codes.
    • Email — Receive a verification code at a personal (non-work) email address.
  5. Follow the on-screen prompts to verify the method.
  6. Repeat to add a second method as a backup. Having two methods ensures you can always recover your account.

The Authenticator app is the most secure and convenient method.

  1. On the Security info page, click + Add sign-in method and select Authenticator app.
  2. Click Next. A QR code will appear on the screen.
  3. On your phone, open the Microsoft Authenticator app.
  4. Tap + (Add account) > Work or school account > Scan a QR code.
  5. Scan the QR code displayed in your browser.
  6. A test notification will be sent to your phone. Approve it to complete setup.
  7. Click Next in the browser to confirm.

3. Register a Phone Number

A phone number lets you receive a text or call to verify your identity.

  1. On the Security info page, click + Add sign-in method and select Phone.
  2. Enter your mobile phone number (include country code if prompted).
  3. Choose Text me a code or Call me.
  4. Click Next.
  5. Enter the verification code you receive, or answer the automated call.
  6. Click Next to confirm.

4. Register a Personal Email Address

A backup email gives you another way to receive a reset code.

  1. On the Security info page, click + Add sign-in method and select Email.
  2. Enter a personal email address (not your work email — use Gmail, Outlook.com, etc.).
  3. Click Next.
  4. Check your personal inbox for the verification code.
  5. Enter the code and click Next to confirm.

5. Reset Your Password Using SSPR

If you forget your password, follow these steps to reset it yourself.

  1. Go to the Microsoft 365 sign-in page at https://login.microsoftonline.com.
  2. Enter your work email address and click Next.
  3. On the password screen, click Forgot my password (or Can't access your account?).
  4. Complete the CAPTCHA verification to confirm you are not a robot.
  5. Choose one of your registered verification methods (phone, authenticator app, or email).
  6. Enter the verification code you receive or approve the push notification.
  7. Enter your New password and Confirm password.
  8. Click Finish. Your password is now reset.
  9. Sign in with your new password.

6. Update Your Password on Other Devices

After resetting your password, update it wherever your work account is saved.

  1. Windows PC — Lock your computer (Win + L) and sign in with the new password. If your PC is domain-joined, you may need to connect to the corporate network (VPN or on-site) first.
  2. Outlook Desktop — Outlook will prompt you for the new password. Enter it when prompted.
  3. Mobile Devices — Open the Outlook or Teams app. When prompted, sign in with the new password.
  4. Browser — If your browser offers to update the saved password, click Update.

Troubleshooting

DANGER

Register your authentication methods before you forget your password. If you have not registered and are locked out, contact your IT helpdesk for a manual reset.

Symptom / ErrorPotential CauseSolution
"Self-service password reset is not enabled for your account"SSPR not turned on by ITContact your IT team — they need to enable SSPR for your account or group.
"We couldn't verify your identity"Wrong phone/email enteredGo to aka.ms/setupsecurityinfo and verify your registered methods are current.
Verification code never arrives (text)Phone has no signal or old number on fileTry the Call me option instead. If the number is outdated, contact IT to reset your methods.
"You've tried too many times"Too many failed attemptsWait 15–30 minutes for the lockout to expire, then try again.
New password rejectedDoes not meet policyUse at least 8 characters with uppercase, lowercase, a number, and a symbol. Avoid using previous passwords.