Skip to content
M365 Desk Microsoft 365 user support
Menu

“Can the desk just reset my password?”

Some resets are self-service. Some need a human. None need your password.

A locked-out sign-in and an unexpected MFA prompt look similar from the outside but need different responses. This guide separates what you can fix yourself, what the desk can help with, and what belongs on a security path instead.

Describe a sign-in issue

Reset path

Self-service reset

You still have some access and can prove who you are.

Representative situations

  • Reset a forgotten password through Microsoft self-service reset (SSPR), where enabled
  • Change a password that is expiring, while still signed in
  • Register a new authenticator method while an existing one still works
  • Update a recovery phone number or email on file

Reset path

Desk-assisted reset

You're locked out, or self-service isn't available or isn't working.

Representative situations

  • A full lockout with no working verification method left
  • A new or replacement device that will not complete MFA registration
  • An account locked after repeated failed sign-in attempts
  • A returning or departing employee whose credential needs a routine reset

Reset path

Security escalation

Something about the prompt itself looks wrong.

Representative situations

  • An MFA approval prompt you did not request
  • A sign-in notification from an unfamiliar device or location
  • A password-reset email you did not ask for
  • Repeated prompts arriving outside normal working hours

Never send this—even to the desk

A reset request should never include a secret.

  • Your passwordCurrent, previous, or a guessed replacement.
  • A recovery or backup codeIncluding printed backup codes for an authenticator app.
  • A one-time code from a text or appRead aloud, typed, or pasted into a request.
  • An approval you are being asked to tapIf someone asks you to approve a prompt to “verify” a request, that is the request to refuse.

Before you contact anyone

Three questions people usually have.

Will the desk ever ask for my password?

No. A reset is completed through the identity platform’s own reset or MFA-registration flow, never by collecting a password, recovery code, or one-time code in a message.

What if I approved an MFA prompt by mistake?

Say so immediately when you contact your organization’s authorized security path. Note the time and app so the account can be reviewed without guessing what happened.

Can the desk reset someone else’s password on request?

Only with an identifiable, authorized requester and a way to confirm the affected person’s identity. A request made only by urgency or a manager’s name is not enough on its own.

Resets fix one person. Policy decides everyone

Related access work

Sign-in is one part of the access picture.

Review people and access support →Mobile sign-in and setup →
M365 Desk

One place for everyday Microsoft 365 questions to begin.

English-language user support for growing Canadian teams. Service plans are priced in Canadian dollars.

Describe your issue

M365 Desk is an independent IT provider and is not affiliated with Microsoft. Microsoft and Microsoft 365 are trademarks of the Microsoft group of companies.

Related brands share common ownership and are operated by the same team.