No Ticket Needed

Appearance

How to Set Up Self-Service Password Reset (SSPR)

Applies toMicrosoft 365Entra ID
7 min fix Updated 16 Aug 2026

By , 10+ years in IT support and helpdesk How these guides are checked

Quick Answer

Go to aka.ms/setupsecurityinfo, sign in, click Add sign-in method, and register a phone number (for text messages) and the Microsoft Authenticator app.

Checked against Microsoft Learn - end of support and retirement, Microsoft 365 Roadmap and between 5 Aug 2026 and 12 Sep 2026. Nothing published in that period has been linked to this guide.

Summary ​

This article shows you how to register your authentication methods for Self-Service Password Reset (SSPR) so you can reset a forgotten password on your own — without calling the helpdesk.

Before You Start ​

  • A Microsoft 365 work or school account.
  • Your organization must have SSPR enabled (most organizations do).
  • Access to at least one of: a mobile phone, the Microsoft Authenticator app, or a personal email address.

Instructions ​

1. Register Your Authentication Methods ​

Set up at least one recovery method before you can use SSPR. Do this now so you are prepared if you ever forget your password.

  1. Open a browser and go to https://aka.ms/setupsecurityinfo.
  2. Sign in with your work email and current password.
  3. You will see the Security info page. Click + Add sign-in method.
  4. Choose a method from the dropdown:
    • Phone — Receive a text message or phone call with a verification code.
    • Authenticator app — Use the Microsoft Authenticator app for push notifications or one-time codes.
    • Email — Receive a verification code at a personal (non-work) email address.
  5. Follow the on-screen prompts to verify the method.
  6. Repeat to add a second method as a backup. Having two methods ensures you can always recover your account.

2. Register the Microsoft Authenticator App (Recommended) ​

The Authenticator app is the most secure and convenient method.

  1. On the Security info page, click + Add sign-in method and select Authenticator app.
  2. Click Next. A QR code will appear on the screen.
  3. On your phone, open the Microsoft Authenticator app. If the app is not on your phone yet, see How to Use the Microsoft Authenticator App.
  4. Tap + (Add account) > Work or school account > Scan a QR code.
  5. Scan the QR code displayed in your browser.
  6. A test notification will be sent to your phone. Approve it to complete setup.
  7. Click Next in the browser to confirm.

3. Register a Phone Number ​

A phone number lets you receive a text or call to verify your identity.

Note: Microsoft is retiring its own text-message and phone-call delivery, and that covers password reset as well as sign-in. From February 1, 2027, organizations that have not arranged their own telecom provider through the Microsoft Security Store can no longer use SMS or voice; organizations that do arrange one keep them. Register a phone number today — it still works — and add the Authenticator app (Method 2) or a personal email address (Method 4) as well, so resetting your own password never rests on a text message alone.

Microsoft's own list of the methods a password reset accepts is the Authenticator app, one-time code apps, text message, phone call, and a code sent to an email address. A passkey is not on that list. Microsoft has said it is "planning to introduce support to change password for users who authenticate with passwordless sign in" and has not given a date for it, so if your organization moves you to passkeys for signing in, keep the Authenticator app or a personal email address registered here as well — a password reset still runs on those.

  1. On the Security info page, click + Add sign-in method and select Phone.
  2. Enter your mobile phone number (include country code if prompted).
  3. Choose Text me a code or Call me.
  4. Click Next.
  5. Enter the verification code you receive, or answer the automated call.
  6. Click Next to confirm.

4. Register a Personal Email Address ​

A backup email gives you another way to receive a reset code.

  1. On the Security info page, click + Add sign-in method and select Email.
  2. Enter a personal email address (not your work email — use Gmail, Outlook.com, etc.).
  3. Click Next.
  4. Check your personal inbox for the verification code.
  5. Enter the code and click Next to confirm.

5. Reset Your Password Using SSPR ​

If you forget your password, follow these steps to reset it yourself.

  1. Go to the Microsoft 365 sign-in page at https://login.microsoftonline.com.
  2. Enter your work email address and click Next.
  3. On the password screen, click Forgot my password (or Can't access your account?).
  4. Complete the CAPTCHA verification to confirm you are not a robot.
  5. Choose one of your registered verification methods (phone, authenticator app, or email).
  6. Enter the verification code you receive or approve the push notification.
  7. Enter your New password and Confirm password.
  8. Click Finish. Your password is now reset.
  9. Sign in with your new password.

6. Update Your Password on Other Devices ​

After resetting your password, update it wherever your work account is saved.

  1. Windows PC — Lock your computer (Win + L) and sign in with the new password. If your PC is domain-joined, you may need to connect to the corporate network (VPN or on-site) first. To understand why a domain-joined laptop can keep expecting the old password for a while, see Understanding Password Resets.
  2. Outlook Desktop — Outlook will prompt you for the new password. Enter it when prompted.
  3. Mobile Devices — Open the Outlook or Teams app. When prompted, sign in with the new password.
  4. Browser — If your browser offers to update the saved password, click Update.

Troubleshooting ​

DANGER

Register your authentication methods before you forget your password. If you have not registered and are locked out, contact your IT helpdesk for a manual reset.

Symptom / ErrorPotential CauseSolution
"Self-service password reset is not enabled for your account"SSPR not turned on by ITContact your IT team — they need to enable SSPR for your account or group.
"We couldn't verify your identity"Wrong phone/email enteredGo to aka.ms/setupsecurityinfo and verify your registered methods are current.
Verification code never arrives (text)Phone has no signal or old number on fileTry the Call me option instead. If the number is outdated, contact IT to reset your methods.
"You've tried too many times"Too many failed attemptsWait 15–30 minutes for the lockout to expire, then try again.
New password rejectedDoes not meet policyUse at least 8 characters with uppercase, lowercase, a number, and a symbol. Avoid using previous passwords.

Last updated:

Frequently asked questions

Why do I need to register two methods?
If you only register one method (like an authenticator app) and you lose your phone, you are locked out completely. Having a backup method (like a personal email or alternate phone number) ensures you can always recover your account.
Can I use a personal email address for password reset?
Yes. When you click 'Add sign-in method', choose 'Email'. Make sure it is an address you check regularly (like your personal Gmail), not an old account you cannot access.