# Password Reset

When users forget their password, they can reset their password via ARKSSPR. The password reset process is started by clicking the **Password Reset** button on the main screen.

The username is entered and the appropriate domain is selected from the list. Supported formats in the username section are as follows.

1. User Principal Name (<username@domain.com>)
2. samAccountName (domain\username)

<figure><img src="https://60632999-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MgdlemWm0JI6_ILmafb%2Fuploads%2FYD8z34izAb1gJaptGfpI%2Fimage.png?alt=media&#x26;token=fe6169df-6de1-4f00-8098-c4c08fd73194" alt=""><figcaption><p>Username and Domain Screen</p></figcaption></figure>

Select the 2FA method. The next screen will vary depending on the method selected.

<figure><img src="https://60632999-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MgdlemWm0JI6_ILmafb%2Fuploads%2FRMdLM6XjV2Z11wD1LbbV%2Fimage.png?alt=media&#x26;token=1c90deb0-9ce9-40a1-a627-9b8fbc59977f" alt=""><figcaption><p>Validation Type</p></figcaption></figure>

### SMS

When SMS is selected as the 2FA method, the user is asked to enter his phone number. The last 4 digits of the phone number defined for the user are shown on the screen. All formats can be used when entering the phone number, ARKSSPR normalizes the typed number and converts it into the required format.

* +90 5xx yyy zz tt
* 90 5xx yyy zz tt
* 0 5xx yyy zz tt
* 5xx yyy zz tt

<figure><img src="https://60632999-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MgdlemWm0JI6_ILmafb%2Fuploads%2FCZofF2uASIsBcj8yEdoS%2Fimage.png?alt=media&#x26;token=a330594a-425e-4312-be0f-6ae3788dcc12" alt=""><figcaption><p>Password reset with SMS</p></figcaption></figure>

After entering the phone number, the OTP code sent via SMS is entered. You should enter verification code in 5 minutes.

<figure><img src="https://60632999-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MgdlemWm0JI6_ILmafb%2Fuploads%2FjCO4Z8YZgoGZVNSi3DEJ%2Fimage.png?alt=media&#x26;token=9a9d6e13-be6a-452a-bd6a-13ad8024fd20" alt=""><figcaption></figcaption></figure>

### E-Mail

When E-Mail is selected as the 2FA method, the user is asked to enter his e-mail address. Some characters of the e-mail defined for the user are shown on the screen.&#x20;

<figure><img src="https://60632999-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MgdlemWm0JI6_ILmafb%2Fuploads%2FfBNSo5OIHFMZzoLmRsfz%2Fimage.png?alt=media&#x26;token=b926b3fa-bd64-46ce-b515-42eae7dec7f6" alt=""><figcaption><p>Password reset with Secondary E-Mail</p></figcaption></figure>

After entering the e-mail address, the OTP code sent via e-mail. You should enter verification code in 5 minutes.

<figure><img src="https://60632999-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MgdlemWm0JI6_ILmafb%2Fuploads%2Ft729LhttXV4x8LbxbMwW%2Fimage.png?alt=media&#x26;token=42a65680-86f3-4e37-8f6e-7fd85eb8fd8f" alt=""><figcaption></figcaption></figure>

### Authenticator

When Authenticator is selected, the OTP code generated from the application must be entered in this field.

<figure><img src="https://60632999-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MgdlemWm0JI6_ILmafb%2Fuploads%2FP7t7sARFLx9dwKRDWWY0%2Fimage.png?alt=media&#x26;token=61505a36-3434-4310-abe0-3551e535ffb2" alt=""><figcaption><p>Password reset with Authenticator App</p></figcaption></figure>

### Password Reset

The new password must be entered twice. If the account is thought to be locked, the Unlock Account option is selected along with the password reset and the account is unlocked.

<figure><img src="https://60632999-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MgdlemWm0JI6_ILmafb%2Fuploads%2FTmN0le531kpYjsnRBnbH%2Fimage.png?alt=media&#x26;token=3ffe293d-8f17-4867-9862-a7294642f4fa" alt=""><figcaption><p>Password Reset with Unlock Account</p></figcaption></figure>

### Important

* The password to be chosen must be determined according to ARKSSPR password policies, at least based on Active Directory Password policies.
  * Password complexity,
  * History rules
  * Minimum password age
* Passwords generated with the Generate Password button are not saved anywhere. Therefore, the password generated by this button must be remembered by the user.
