Fix 1 of 1
Turn on self-service password reset and move people to passkeys
Microsoft Entra, Okta and Google Workspace all let users reset passwords and unlock accounts themselves after verifying with MFA. Passkeys cut resets further because there is no password to forget.
- 1Enable self-service password reset in Entra ID, Okta or Google Workspace and require two verification methods.
- 2Make sure users register their methods at sign-in (registration campaign).
- 3Enable passkeys or Windows Hello for Business for staff who can use them.
- 4Change the helpdesk reply for reset requests to a link to the self-service page.
- 5Track reset tickets monthly to confirm they are dropping.
Tools: Microsoft Entra ID SSPR · Okta self-service · Google Workspace · Passkeys or Windows Hello for Business