Skip to content

Change or remove my password

Replace your password with a new one, or remove it and sign in with your passkeys only.

Who can do it

Any person who holds a password, for their own account. No role or permission is needed. Your password is one credential for every tenant you belong to, so a change applies in all of them.

The console offers neither action when:

  • your account holds no password: the Password section is absent from the Security page, and the account menu offers no Change password;
  • you are acting in a tenant under support access: neither the Security item nor Change password is in the account menu;
  • your session came from your organization's identity provider and the platform holds no credential for you: the identity provider holds your password, and you change it there.

Before you start

  • To change it, know your current password. The new one follows the password policy: 15 to 128 characters, not a common or compromised password, not containing the product name or the part of your e-mail address before the @, different from your current one and from your last five.
  • To remove it, every tenant you belong to must accept a passkey, and you must already hold one. Removing it cannot be undone on this page: a new password is set later through the password reset.

Steps

To change your password:

  1. Open the account menu in the header and select Security, or select Change password in the account menu directly.
  2. On the Security page, under Password, select Change password.
  3. In Change your password, fill in Current password, New password and Confirm new password.
  4. Select Change password.
  5. If Confirm your identity to continue opens, confirm with your own sign-in steps, then enter the passwords again and submit once more: a password is never sent again for you.

To remove your password:

  1. Open the account menu in the header and select Security.
  2. Under Password, select Remove password.
  3. In Remove your password?, type your account's e-mail address exactly as shown, then select Remove password.
  4. If Confirm your identity to continue opens, confirm with your own sign-in steps.

What you see when it worked

After a change, the console says "Password changed": every session of your account has ended, this one included, in every tenant. The console returns to the sign-in screen; sign in with the new password.

After a removal, the console says "Your password was removed." and the Password section reads "Your account no longer has a password. You sign in with your passkeys." The account menu stops offering Change password.

Both changes are listed under Recent security activity.

If it fails

What you see Cause What to do
A message naming the password rule, such as "The password must be at least 15 characters long." The new password breaks the password policy Choose a password that meets the rule
"The change was refused. Check your current password, and make sure the new one is not one you have used recently." The current password is wrong, or the new one repeats a recent one; the server does not say which Check both and try again
"This account signs in through your tenant's identity provider and has no ANKASecure password to change." Your identity provider holds your credential Set a first password through Forgot password? on the sign-in page; a platform administrator is sent no reset link
"One of your memberships is entered only with your password. Add a passkey it accepts first. Nothing was removed." Removing the password would leave you no way into one of your tenants Add a passkey that tenant accepts, then remove the password
A refusal saying no platform super administrator could sign in afterwards You are the last platform super administrator who could sign in with it Give another active platform member the super administrator role and a way to sign in first
"Does not match. Type it exactly as shown, including capitalization." The e-mail address typed in the removal step differs Type it exactly as shown
"No answer came back in time, so we cannot confirm whether the password was changed." The account service did not answer in time Sign in again; try the new password first

Without the console

Surface How
API POST /api/v3/auth/account/password/change (operation changePassword); DELETE /api/v3/auth/account/password (operation deleteAccountPassword)