> ## Documentation Index
> Fetch the complete documentation index at: https://docs.box.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Reset My Box Account Password

## Why am I being asked to reset my password?

The administrator has enabled *Strong Password Requirements*, *Exposed Password Detection*, or both. Depending on your permission level you will be asked to reset your password when you first log in or within Box.

Select and follow the applicable steps:

* [Resetting your Box password using Account Settings](#resetting-your-box-password-using-account-settings)
* [Resetting your password after being blocked at login](#resetting-your-password-after-being-blocked-at-login)
* [Resetting your Box password using the notification banner](#resetting-your-box-password-using-the-notification-banner)

## Resetting your Box password using Account Settings

To reset the password for your Box account, follow this process:

1. Visit [https://app.box.com/reset](https://app.box.com/reset) and enter the email address associated with your Box account.
2. Check your email, you will receive an email with a link to reset your password.

* * Password reset links sent via email expire 3 hours after they are sent. If you need a new link after your current one has expired, visit [https://app.box.com/reset](https://app.box.com/reset) to have another link emailed to you.
  * If you do not receive an email from Box for this password reset, check to see if your Box account is associated with that specific email address or another email address.
  * Also, [check your spam folder](https://docs.box.com/en/box-fundamentals/for-users/user-login-and-settings/configuring-email-for-box-notifications.md) in your email client for this email.

## Resetting your password after being blocked at login

If your organization has exposed password detection enforcement enabled and your password is found in a third-party database of leaked passwords, you are blocked from accessing Box after entering your credentials. Box displays a message informing you that you must reset your password.

To reset your password:

1. Box automatically sends a password reset link to the email address associated with your account.
2. Check your email and select the reset link.
   * Password reset links expire 3 hours after they are sent. If you need a new link after yours has expired, visit [https://app.box.com/reset](https://app.box.com/reset).
   * If you do not receive an email from Box, verify that your Box account is associated with the email address you expect, and [check your spam folder](https://docs.box.com/en/box-fundamentals/for-users/user-login-and-settings/configuring-email-for-box-notifications.md).
3. Create a new password. Your new password cannot be a known exposed password. Follow the password strength guidance provided on the reset page.
4. After successfully resetting your password, return to [https://app.box.com/login](https://app.box.com/login) to log in.

> [!NOTE]
>
> If you do not have access to the email address associated with your account, contact your Box administrator. Admins can generate a password reset link on your behalf from the Admin Console.

## Resetting your Box password using the notification banner

When you log in to Box, you may receive a notification asking you to update your password.
This can happen if your administrator requires strong passwords, or if your password has been
found in a third-party database of leaked passwords.

1. Click **Update** in the notification banner to open the *Change password* modal.
2. Type in your **Current password** in the field provided.
3. Type in your **New password** in the field provided following the *Password strength* guidance. The list of password criteria will indicate what your password is missing with an "X."
4. With all password requirements met, retype your password in the **Confirm new password** field.
5. Click **Save**.

You must meet all criteria to successfully save and update your password. After you click **Save**, you will see the notification, "Your password has been changed successfully."

### If you see an exposed password notification

Box notifies you if your password has been found in a third-party database of leaked passwords:

* A notification banner displays on the All Files page with an Action needed message advising you to change your password.
* An informational banner displays in Account Settings > Authentication.

You are not blocked from using Box, but Box strongly recommends that you [change your password](https://docs.box.com/en/box-fundamentals/for-users/user-login-and-settings/reset-my-box-account-password.md) as soon as possible to protect your account.