After July 2021, the 2.3.x release line no longer received quality updates or user guide updates. PHP 7.3 reached end of support in December 2021, and Adobe Commerce 2.3.x reached end of support in September 2022. We strongly recommend upgrading to Adobe Commerce 2.4.x to help maintain PCI compliance.

Resetting Passwords

This site contains archived merchant documentation for a version of Adobe Commerce and Magento Open Source that has reached end-of-support. The documentation available here is intended for historical reference only and is not maintained. The Adobe Commerce Merchant Documentation for current releases is published on the Adobe Experience League.

Customers usually reset their passwords from the storefront by clicking the “Forgot Your Password?” link. However, the store administrator can initiate either a password reset or a forced sign-in from the Admin.

Reset Password A password reset email is sent directly to the customer’s email account. At no time does the store administrator gain access to the customer’s password.
Force Sign In Revokes the OAuth access tokens that are associated with the customer account. This can be used only with customer accounts that have been assigned OAuth tokens, as part of a Web API integration. To learn more, see OAuth-based authentication in the Magento DevDocs.

Note: Standard customer accounts created from the storefront or from the Admin do not have OAuth tokens.

Reset a password from the storefront

  1. On the Login page, click Forgot Your Password?.

  2. When prompted, enter the Email Address that is associated with your account and click Reset My Password.

    Forgot Your Password

    If the email address you entered matches the one that is associated with the account, you will receive a Password Reset Confirmation email with a link to reset your password.

  3. When the email arrives, click the reset password link and enter your New Password when prompted.

  4. Enter it again to confirm and click Reset Password.

    Your new password must be six or more characters in length without spaces.

    When you receive confirmation that the password is updated, you can use the new password to sign in to your account.

Reset a password from the Admin

  1. On the Admin sidebar, go to Customers > All Customers.

  2. Find the customer account in the grid and click Edit in the Action column.

  3. In the set of options across the top of the page, click Reset Password.

    The number of password reset requests that are allowed within an hour is set in the configuration.

Revoke a customer’s OAuth tokens

Do not proceed unless you are a developer familiar with API Authentication.

  1. On the Admin sidebar, go to Customers > All Customers.

  2. Find the customer account in the grid and click Edit in the Action column.

  3. In the set of options across the top of the page, click Force Sign In.

  4. When prompted to confirm, click OK.

© 2024 Adobe. All rights reserved.