Fix a password that expired
We'll change the password at the prompt, use the reset portal, or get you to IT when self-service is not available.
What you'll need
- Access to the login page or password reset portal
- Current password (if you remember it)
- Phone or email for verification (work accounts)
At a glance
- Change the password when prompted at login—most systems require a new password before access.
- Use the organization password reset portal (often passwordreset.microsoftonline.com or similar).
- Confirm you are not reusing an old password; many policies block that.
- If self-service is disabled, contact your IT admin or help desk.
- On Linux, an admin can run chage -d 0 username to force a password change at next login.
Quick triage — pick your path
Get started
Choose the option that matches what you see. You can jump straight to that section.
Steps
Goal: Change the expired password so you can log in.
- When you see “Your password has expired,” enter your current password, then a new one twice.
- Good: The new password is accepted and you are logged in.
- Bad: The form rejects the new password or you do not see the prompt. Proceed to Use the reset portal.
Change at login
Goal: Change the password when the system prompts you at login.
- Enter your current (expired) password. The system should then ask for a new password.
- Enter the new password twice. Follow the policy (length, complexity, no reuse).
- Good: The password is accepted and you are logged in.
- Bad: “Cannot reuse previous password” or “Does not meet requirements”—adjust and retry.
Reset portal
Goal: Use the organization’s password reset portal when you cannot change at login.
- Go to passwordreset.microsoftonline.com (Microsoft 365) or your org’s URL.
- Enter your work email. Complete verification (phone or email code).
- Set a new password. Confirm it meets the policy.
- Good: You receive confirmation and can log in with the new password.
- Bad: The portal does not recognize your account or verification fails—contact IT.
When to get help
Contact your IT admin or help desk if:
- The password change form gives an error you cannot resolve.
- The reset portal does not recognize your account.
- Self-service password reset is disabled for your organization.
- You have no way to verify your identity (no access to phone or email on file).
Verification
- You can log in with the new password.
- No “password expired” message when you sign in.
- You can access your usual apps and services.
Escalation ladder
Work from the device outward. Stop when the problem is fixed.
- Change at login Enter current password, then new password when prompted.
- Reset portal Use passwordreset.microsoftonline.com or your org's portal.
- Check policy Confirm you are not reusing a password; meet length and complexity.
- Contact IT Help desk or admin when self-service fails.
What to capture if you need help
Before calling support or posting for help, have these ready. It speeds everything up.
- Username and organization
- Exact error message
- Whether you have access to the reset portal
- Steps already tried
Reviewed by Blackbox Atlas
Frequently asked questions
- Why would my password expire?
- Work and school accounts often have password expiration policies (e.g. every 90 days) for security. Personal accounts (Gmail, Apple) typically do not expire.
- Can I reuse an old password when it expires?
- Often no. Many policies require a new password that you have not used before. Check the error message—it usually says if reuse is blocked.
- What if I cannot change my password myself?
- If self-service is disabled, contact your IT admin or help desk. They can reset your password or extend the expiration so you can change it.
Rate this guide
Was this helpful?
Thanks for your feedback.