Password reset
A worker who has forgotten their password can reset it themselves. There are two ways in, and both end the same way: a new password, and every other device signed out.
In the app
- On the sign-in screen, tap Forgot password?
- Enter the work email. A 6-digit code is emailed.
- Enter the code and tap Continue. A wrong code is caught here, before any password is typed.
- Choose a new password of at least 8 characters.
The worker is signed in straight away — no browser at any point.
A code lasts 15 minutes and works once. A new one can be sent after two minutes, and the earlier code keeps working until one of them is used.
Five wrong codes end the attempt. The worker asks for a new code and starts again.
Leaving the app to read the code is expected. The screen holds its place, so the worker comes back and types the code rather than starting again.
From the email link
The emailed link still opens the reset page in a browser. Office users can finish there. The page also offers Open the app, for a worker who has nothing to sign in to on the web.
What an admin can and cannot do
An admin can send a worker a reset from the field users screen. An admin cannot see a code, choose one, or set a password for someone else.
Signing out everywhere
A finished reset signs the worker out on every device. This is the intended behaviour after a lost or shared phone.
Single sign-on
A worker whose company uses Microsoft sign-in has no password to reset. The app sends them to their company sign-in instead.
Accounts with no sign-in
A field user added as a record-only (Custom) user has no password and no Microsoft sign-in. The sign-in screen, on web and mobile, tells them: “This account can’t sign in yet. Ask your office to set up your login.” It offers no password field and no Microsoft button.