Why Request In-Person-Only Password Changes?

Some user accounts may be targeted by malicious actors attempting to reset passwords by impersonating the account owner, often by calling the help desk and pretending to be the user. To prevent this type of social engineering attack, you can request that all password resets for your account require in-person verification.

Enabling this feature adds an extra layer of security to your account while maintaining most password reset options.

What You Can Still Do

Once in-person password verification is active, you will still have several options for managing your password:

• You can still change your password online using your current password
• You can still use the Microsoft Self-Service Password Reset Tool (SSPRT), as long as you complete the authentication steps you previously set up
• You can still reset your password in person at the ITS Help Desk (Lovejoy Library, Room 0005) with a valid photo ID

What Changes

The only restriction this security feature implements is:

• You cannot reset your password over the phone, this method is disabled to block impersonation attempts

How to Enable In-Person-Only Password Verification

If you'd like to enable this added protection for your account, you can access the request form HERE. Contact the ITS Help Desk for assistance with enabling this feature.

Additional Security Considerations

This security measure is particularly recommended for:

• Users with administrative privileges
• Accounts that handle sensitive data
• Users who have previously experienced security incidents
• Anyone who wants enhanced protection against social engineering attacks

Need Additional Support?

This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!