TenantPilotGet TenantPilot ↗
← All Microsoft 365 guidesPASSWORDS

How to reset a Microsoft 365 user password safely

A forgotten password should be a straightforward support task, but password resets are security-sensitive. Confirm who is requesting the reset before taking action.

SUPPORTED TENANTPILOT TASK · Fictional examples · Updated October 2026

Before a password reset

  • Verify the requester using your organisation’s established identity-check process.
  • Confirm whether the account is cloud-only or synchronised with an on-premises identity system.
  • Check whether self-service password reset is appropriate and enabled.
  • Never send temporary credentials to an unverified personal email address.

Perform the reset

  1. Find the exact account in the Microsoft 365 or Entra administration interface.
  2. Confirm identity and administrative approval.
  3. Choose the password-reset action and follow your organisation’s credential-delivery policy.
  4. Require a password change at next sign-in where appropriate.
  5. Check with the user that access has been restored and record the action.

Password reset versus compromised account

If compromise is suspected, a password reset alone may be insufficient. Follow your incident process, consider session revocation and investigate risky sign-ins.

Where TenantPilot fits

TenantPilot includes a Reset user password task and a separate temporary-password workspace. Staff should still follow identity verification and security procedures.

Further reading and official guidance

Microsoft services and interfaces can change. Check the linked official guidance before making changes in a live organisation.

Prefer guided Microsoft 365 administration?

TenantPilot provides guided tasks for suitable day-to-day administration on Windows, while complementing your existing IT support partner.

See TenantPilot in Microsoft Store ↗

Always follow your organisation’s permissions, privacy and IT support procedures.