How to reset Duo Security password

Introduction: How to Reset Duo Security Password

How to Reset Duo Security Password? If you are locked out and staring at a Duo prompt, the first thing to understand is that a Duo password reset usually is not what it sounds like. Duo Security, Cisco's multi-factor authentication (MFA) platform, generally does not store your login password at all. Your password lives with your organization's identity provider, such as Microsoft Entra ID (formerly Azure Active Directory) or on-premises Active Directory. Duo steps in after you enter that password to confirm it is really you, usually through the Duo Mobile app.

That means "reset Duo password" typically points to one of two problems: you forgot the password you type before the Duo prompt appears, or Duo Mobile itself stopped working, often because you got a new phone. This guide walks through both, using current 2026 flows for Windows 11, Microsoft 365, iPhone, Android, and the Duo Universal Prompt. If you want a refresher on how the second factor works first, see our guide to what two-factor authentication is and how it works.

Which Password Are You Actually Resetting?

Before you click anything, identify which credential failed. If the login screen rejected your username and password before a Duo push or passcode was ever requested, your primary password is the problem, and the fix happens in your organization's identity system, not in Duo. If your password was accepted but you never received a push, or your passcodes are rejected, then Duo Mobile is the problem and you need to reactivate or reset the app instead.

This distinction matters because Duo end users will not find a "Forgot password?" link on the Duo prompt. That link exists only for Duo administrators signing in to the Duo Admin Panel. Everyone else resets their password through their company's normal process, then re-authenticates through Duo as usual.

How to Reset the Password Behind Your Duo Login

Most organizations that use Duo pair it with Microsoft Entra ID or Active Directory. Here is the typical reset path in 2026:

1. Use self-service password reset (SSPR) if your organization has it enabled. For Microsoft accounts, go to passwordreset.microsoftonline.com, enter your work email, and verify your identity with the methods registered on your security info page (mysignins.microsoft.com/security-info). Then set a new password.
2. On a Windows 11 work computer joined to your company domain, press Ctrl + Alt + Delete and choose Change a password if you still know your current one and simply need to update it.
3. If you are an administrator resetting a password for someone else, use the Microsoft 365 admin center (admin.microsoft.com): go to Users > Active users, select the person, and choose Reset password. The same action is available in the Microsoft Entra admin center at entra.microsoft.com.
4. If SSPR is not enabled, contact your IT team or help desk. They can reset the password in the directory, and Duo will continue to work with your existing enrolled devices afterward.

For step-by-step Microsoft instructions, see our companion guides on how to reset a Microsoft password and how to reset MFA in Office 365. Duo administrators locked out of the Admin Panel can use the Forgot your password? link on the admin.duosecurity.com sign-in page, which sends a reset email to the address on the admin account.

How to Reset Duo Mobile on a New or Existing Phone

The other common meaning of a Duo password reset is needing to reset Duo Mobile itself, usually after switching phones, reinstalling the app, or restoring a device. Duo replaced its old prompt with the Universal Prompt, and the current self-service flow looks like this:

1. Start a login to any Duo-protected application. When the Duo prompt appears, select Other options.
2. Choose Manage devices. Duo will ask you to verify your identity with a method that still works, such as a phone call to your saved number, a hardware token, or a temporary bypass code from your help desk.
3. Select your phone, then choose I have a new phone (or add the device fresh with Add a device).
4. On the new phone, install Duo Mobile from the App Store or Google Play, open it, tap the + (Add account) button, and choose Use QR code to scan the code shown in your browser. Your account reactivates on the new device.

Two shortcuts can make this easier. First, Duo Restore: if your organization allows it, Duo Mobile can back up its accounts to iCloud on iPhone or Google Drive on Android, so a new phone can recover them during setup. Second, if you have no working second method at all, your Duo administrator can send a reactivation link by email or text, or read you a one-time bypass code to type at the prompt. For installing or updating the app itself, see how to install and update Duo Security.

Troubleshooting Common Duo Password Reset Problems

• "Invalid passcode" errors. Duo Mobile passcodes are time-based, so a device clock that has drifted can invalidate them. On iPhone, go to Settings > General > Date & Time and turn on Set Automatically. On Android, use Settings > System > Date & time and enable automatic time. On a Mac, open System Settings > General > Date & Time and confirm the time is set automatically.
• Push notifications never arrive. Check that notifications are allowed (iPhone: Settings > Notifications > Duo Mobile; Android: Settings > Apps > Duo Mobile > Notifications), that the phone has a working internet connection, and that battery-saver or Focus modes are not silencing the app. Opening Duo Mobile and pulling down to refresh will also fetch any pending request.
• Your new password keeps failing. Watch for Caps Lock, and remember that saved credentials elsewhere can lock you out again. On an iPhone, mail accounts that store the old password (managed under Settings > Apps > Mail > Mail Accounts in current iOS versions) may retry it repeatedly and trigger account lockouts, so update every place the old password was saved.
• Account locked in Duo. Too many failed attempts can temporarily lock authentication. If waiting does not clear it, your Duo administrator can unlock the account from the Admin Panel.

Tips for a Strong Password After Your Duo Reset

When you set the new password, favor length over gimmicks. A passphrase of several unrelated words, sixteen characters or more, is far harder to crack than a short password with symbol substitutions, and it is easier to remember. Make it unique to your work account, and let a password manager generate and store unique passwords everywhere else.

Current guidance from NIST also moves away from forced changes on a fixed schedule; change a password when you suspect it has been exposed rather than rotating it constantly, which tends to produce predictable patterns. And keep MFA on everything that supports it. The password is only one layer, and pairing it with Duo or another second factor is what makes it meaningful. Our overview of multi-factor authentication and why you need it covers this in more depth.

Set Up Recovery Options Before You Need Them

Almost every painful Duo lockout traces back to having exactly one registered device. A few minutes of preparation removes most of the risk:

• Register a second method in Duo's device management portal, such as a second phone, a landline for callbacks, or a hardware token.
• Enable Duo Restore in the Duo Mobile app if your organization permits it, so a new phone can recover your accounts from iCloud or Google Drive.
• Keep your phone number current. If you change numbers, update your Duo device and your Microsoft security info page before retiring the old SIM.
• Know your help desk process. Find out in advance how your organization issues bypass codes and verifies identity, so an unexpected lockout does not become a stalled workday.

Frequently Asked Questions

Does Duo have a "Forgot password" option?
Not for everyday users, because Duo does not manage your primary password. You reset that through your organization's identity provider or IT team, then authenticate through Duo normally. Duo administrators do have a forgot-password link on the Duo Admin Panel sign-in page.

How do I reset Duo Mobile when I get a new phone?
From the Duo prompt, choose Other options, then Manage devices, verify with a method that still works, select I have a new phone, and scan the QR code with Duo Mobile on the new device. If Duo Restore was enabled, the app can recover accounts from your iCloud or Google Drive backup instead. With no working method, ask your administrator for a reactivation link.

What is a Duo bypass code?
A bypass code is a temporary passcode your Duo administrator generates when you cannot use any registered device. You enter it at the Duo prompt in place of a push or app passcode, sign in, and then update your devices so you are not relying on bypass codes again.

Conclusion: How to Reset Duo Security Password

Resetting a Duo Security password comes down to knowing which piece failed: the primary password, which you reset through Microsoft Entra ID, Active Directory, or your IT team, or Duo Mobile itself, which you reactivate through the Manage devices flow, Duo Restore, or an administrator-issued reactivation link. Sort out which one applies, follow the matching steps above, and register a backup method so the next phone upgrade or forgotten password is a minor detour instead of a lockout.

If your team spends too much time wrestling with MFA resets, identity management, or account lockouts, K3 Technology can help. We are a managed IT and cybersecurity provider with offices in Denver and Dallas, and we support businesses with Duo, Microsoft 365, and day-to-day IT operations. Contact K3 Technology to talk through your identity and security setup.