IT Support Specialist how-to
How to Reset a Password Securely
Password resets are common targets for social engineering. Verification protects the company.
Password resets are common targets for social engineering. Verification protects the company. In short: verify; never; reset, then complete the remaining steps below.
Step by step
Verify the user’s identity using your organization’s approved method.
Never accept identity verification based only on information found online.
Reset the password in the directory and require a change at next sign-in.
Deliver the temporary password through an approved secure channel.
Check the account isn’t locked and MFA is working.
Document the reset in the ticket.
Safety reminders for IT support specialists
- Verify identity before resets or access changes
- Follow least-privilege principles
- Report suspected phishing and security incidents immediately
- Handle devices and data according to policy and privacy rules
Key terms
Ticket · SLA · Tier 1 / Tier 2 · Active Directory · MFA · DHCP: see the full IT support specialist glossary.