CINXE.COM

<!DOCTYPE html> <html class="client-nojs vector-feature-language-in-header-enabled vector-feature-language-in-main-page-header-disabled vector-feature-sticky-header-disabled vector-feature-page-tools-pinned-disabled vector-feature-toc-pinned-clientpref-1 vector-feature-main-menu-pinned-disabled vector-feature-limited-width-clientpref-1 vector-feature-limited-width-content-enabled vector-feature-custom-font-size-clientpref-1 vector-feature-appearance-pinned-clientpref-1 vector-feature-night-mode-disabled skin-theme-clientpref-day vector-toc-available" lang="en" dir="ltr"> <head> <meta charset="UTF-8"> <title>Password and 2FA reset - Wikitech</title> <script>(function(){var className="client-js vector-feature-language-in-header-enabled vector-feature-language-in-main-page-header-disabled vector-feature-sticky-header-disabled vector-feature-page-tools-pinned-disabled vector-feature-toc-pinned-clientpref-1 vector-feature-main-menu-pinned-disabled vector-feature-limited-width-clientpref-1 vector-feature-limited-width-content-enabled vector-feature-custom-font-size-clientpref-1 vector-feature-appearance-pinned-clientpref-1 vector-feature-night-mode-disabled skin-theme-clientpref-day vector-toc-available";var cookie=document.cookie.match(/(?:^|; )labswikimwclientpreferences=([^;]+)/);if(cookie){cookie[1].split('%2C').forEach(function(pref){className=className.replace(new RegExp('(^| )'+pref.replace(/-clientpref-\w+$|[^\w-]+/g,'')+'-clientpref-\\w+( |$)'),'$1'+pref+'$2');});}document.documentElement.className=className;}());RLCONF={"wgBreakFrames":false,"wgSeparatorTransformTable":["",""],"wgDigitTransformTable":["",""],"wgDefaultDateFormat": "dmy","wgMonthNames":["","January","February","March","April","May","June","July","August","September","October","November","December"],"wgRequestId":"d3726364-2ada-4a99-a5e7-a5d97bd93f3f","wgCanonicalNamespace":"","wgCanonicalSpecialPageName":false,"wgNamespaceNumber":0,"wgPageName":"Password_and_2FA_reset","wgTitle":"Password and 2FA reset","wgCurRevisionId":2244689,"wgRevisionId":2244689,"wgArticleId":4657,"wgIsArticle":true,"wgIsRedirect":false,"wgAction":"view","wgUserName":null,"wgUserGroups":["*"],"wgCategories":["How-To"],"wgPageViewLanguage":"en","wgPageContentLanguage":"en","wgPageContentModel":"wikitext","wgRelevantPageName":"Password_and_2FA_reset","wgRelevantArticleId":4657,"wgIsProbablyEditable":false,"wgRelevantPageIsProbablyEditable":false,"wgRestrictionEdit":[],"wgRestrictionMove":[],"wgNoticeProject":"wikitech","wgCiteReferencePreviewsActive":true,"wgMediaViewerOnClick":true,"wgMediaViewerEnabledByDefault":true,"wgVisualEditor":{"pageLanguageCode":"en", "pageLanguageDir":"ltr","pageVariantFallbacks":"en"},"wgMFDisplayWikibaseDescriptions":{"search":true,"watchlist":true,"tagline":false,"nearby":true},"wgWMESchemaEditAttemptStepOversample":false,"wgWMEPageLength":7000,"wgCentralAuthMobileDomain":false,"wgEditSubmitButtonLabelPublish":true,"wgDiscussionToolsFeaturesEnabled":{"replytool":true,"newtopictool":true,"sourcemodetoolbar":true,"topicsubscription":false,"autotopicsub":false,"visualenhancements":false,"visualenhancements_reply":false,"visualenhancements_pageframe":false},"wgDiscussionToolsFallbackEditMode":"visual","wgULSPosition":"personal","wgULSisCompactLinksEnabled":false,"wgVector2022LanguageInHeader":true,"wgULSisLanguageSelectorEmpty":false,"wgCheckUserClientHintsHeadersJsApi":["architecture","bitness","brands","fullVersionList","mobile","model","platform","platformVersion"],"wgSiteNoticeId":"2.0"};RLSTATE={"ext.globalCssJs.user.styles":"ready","site.styles":"ready","user.styles":"ready","ext.globalCssJs.user":"ready", "user":"ready","user.options":"loading","ext.pygments":"ready","ext.discussionTools.init.styles":"ready","oojs-ui-core.styles":"ready","oojs-ui.styles.indicators":"ready","mediawiki.widgets.styles":"ready","oojs-ui-core.icons":"ready","skins.vector.search.codex.styles":"ready","skins.vector.styles":"ready","skins.vector.icons":"ready","jquery.makeCollapsible.styles":"ready","ext.wikimediamessages.styles":"ready","ext.visualEditor.desktopArticleTarget.noscript":"ready","ext.uls.pt":"ready","ext.dismissableSiteNotice.styles":"ready"};RLPAGEMODULES=["ext.pygments.view","site","mediawiki.page.ready","jquery.makeCollapsible","mediawiki.toc","skins.vector.js","ext.centralNotice.geoIP","ext.centralNotice.startUp","ext.gadget.site","ext.urlShortener.toolbar","ext.centralauth.centralautologin","ext.visualEditor.desktopArticleTarget.init","ext.visualEditor.targetLoader","ext.echo.centralauth","ext.discussionTools.init","ext.eventLogging","ext.wikimediaEvents","ext.uls.interface", "ext.checkUser.clientHints","ext.dismissableSiteNotice"];</script> <script>(RLQ=window.RLQ||[]).push(function(){mw.loader.impl(function(){return["user.options@12s5i",function($,jQuery,require,module){mw.user.tokens.set({"patrolToken":"+\\","watchToken":"+\\","csrfToken":"+\\"}); }];});});</script> <link rel="stylesheet" href="/w/load.php?lang=en&modules=ext.discussionTools.init.styles%7Cext.dismissableSiteNotice.styles%7Cext.pygments%7Cext.uls.pt%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediamessages.styles%7Cjquery.makeCollapsible.styles%7Cmediawiki.widgets.styles%7Coojs-ui-core.icons%2Cstyles%7Coojs-ui.styles.indicators%7Cskins.vector.icons%2Cstyles%7Cskins.vector.search.codex.styles&only=styles&skin=vector-2022"> <script async="" src="/w/load.php?lang=en&modules=startup&only=scripts&raw=1&skin=vector-2022"></script> <meta name="ResourceLoaderDynamicStyles" content=""> <link rel="stylesheet" href="/w/load.php?lang=en&modules=site.styles&only=styles&skin=vector-2022"> <meta name="generator" content="MediaWiki 1.44.0-wmf.3"> <meta name="referrer" content="origin"> <meta name="referrer" content="origin-when-cross-origin"> <meta name="robots" content="max-image-preview:standard"> <meta name="format-detection" content="telephone=no"> <meta name="viewport" content="width=1120"> <meta property="og:title" content="Password and 2FA reset - Wikitech"> <meta property="og:type" content="website"> <link rel="icon" href="/static/favicon/wikitech.ico"> <link rel="search" type="application/opensearchdescription+xml" href="/w/rest.php/v1/search" title="Wikitech (en)"> <link rel="EditURI" type="application/rsd+xml" href="//wikitech.wikimedia.org/w/api.php?action=rsd"> <link rel="canonical" href="https://wikitech.wikimedia.org/wiki/Password_and_2FA_reset"> <link rel="license" href="https://creativecommons.org/licenses/by-sa/4.0/"> <link rel="alternate" type="application/atom+xml" title="Wikitech Atom feed" href="/w/index.php?title=Special:RecentChanges&feed=atom"> <link rel="dns-prefetch" href="//meta.wikimedia.org" /> <link rel="dns-prefetch" href="//login.wikimedia.org"> </head> <body class="ext-discussiontools-replytool-enabled ext-discussiontools-newtopictool-enabled ext-discussiontools-sourcemodetoolbar-enabled skin--responsive skin-vector skin-vector-search-vue mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject page-Password_and_2FA_reset rootpage-Password_and_2FA_reset skin-vector-2022 action-view"><a class="mw-jump-link" href="#bodyContent">Jump to content</a> <div class="vector-header-container"> <header class="vector-header mw-header"> <div class="vector-header-start"> <nav class="vector-main-menu-landmark" aria-label="Site"> <div id="vector-main-menu-dropdown" class="vector-dropdown vector-main-menu-dropdown vector-button-flush-left vector-button-flush-right" > <input type="checkbox" id="vector-main-menu-dropdown-checkbox" role="button" aria-haspopup="true" data-event-name="ui.dropdown-vector-main-menu-dropdown" class="vector-dropdown-checkbox " aria-label="Main menu" > <label id="vector-main-menu-dropdown-label" for="vector-main-menu-dropdown-checkbox" class="vector-dropdown-label cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet cdx-button--icon-only " aria-hidden="true" ><span class="vector-icon mw-ui-icon-menu mw-ui-icon-wikimedia-menu"></span> <span class="vector-dropdown-label-text">Main menu</span> </label> <div class="vector-dropdown-content"> <div id="vector-main-menu-unpinned-container" class="vector-unpinned-container"> <div id="vector-main-menu" class="vector-main-menu vector-pinnable-element"> <div class="vector-pinnable-header vector-main-menu-pinnable-header vector-pinnable-header-unpinned" data-feature-name="main-menu-pinned" data-pinnable-element-id="vector-main-menu" data-pinned-container-id="vector-main-menu-pinned-container" data-unpinned-container-id="vector-main-menu-unpinned-container" > <div class="vector-pinnable-header-label">Main menu</div> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-pin-button" data-event-name="pinnable-header.vector-main-menu.pin">move to sidebar</button> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-unpin-button" data-event-name="pinnable-header.vector-main-menu.unpin">hide</button> </div> <div id="p-navigation" class="vector-menu mw-portlet mw-portlet-navigation" > <div class="vector-menu-heading"> Navigation </div> <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="n-mainpage-description" class="mw-list-item"><a href="/wiki/Main_Page" title="Visit the main page [z]" accesskey="z"><span>Main page</span></a></li><li id="n-recentchanges" class="mw-list-item"><a href="/wiki/Special:RecentChanges" title="A list of recent changes in the wiki [r]" accesskey="r"><span>Recent changes</span></a></li><li id="n-Server-admin-log:-Prod" class="mw-list-item"><a href="/wiki/Server_Admin_Log"><span>Server admin log: Prod</span></a></li><li id="n-Admin-log:-RelEng" class="mw-list-item"><a href="/wiki/Release_Engineering/SAL"><span>Admin log: RelEng</span></a></li><li id="n-Incident-status" class="mw-list-item"><a href="/wiki/Incident_status"><span>Incident status</span></a></li><li id="n-Deployments" class="mw-list-item"><a href="/wiki/Deployments"><span>Deployments</span></a></li><li id="n-SRE-Team-Help" class="mw-list-item"><a href="/wiki/SRE/SRE_Team_requests"><span>SRE Team Help</span></a></li> </ul> </div> </div> <div id="p-Cloud_VPS_&_Toolforge" class="vector-menu mw-portlet mw-portlet-Cloud_VPS_Toolforge" > <div class="vector-menu-heading"> Cloud VPS & Toolforge </div> <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="n-Cloud-VPS-portal" class="mw-list-item"><a href="/wiki/Portal:Cloud_VPS"><span>Cloud VPS portal</span></a></li><li id="n-Toolforge-portal" class="mw-list-item"><a href="/wiki/Portal:Toolforge"><span>Toolforge portal</span></a></li><li id="n-Request-VPS-project" class="mw-list-item"><a href="https://phabricator.wikimedia.org/project/view/2875/"><span>Request VPS project</span></a></li><li id="n-Admin-log:-Cloud-VPS" class="mw-list-item"><a href="/wiki/Cloud_VPS_Server_Admin_Log"><span>Admin log: Cloud VPS</span></a></li> </ul> </div> </div> </div> </div> </div> </div> </nav> <a href="/wiki/Main_Page" class="mw-logo"> <img class="mw-logo-icon" src="/static/images/icons/wikitech.svg" alt="" aria-hidden="true" height="50" width="50"> <span class="mw-logo-container skin-invert"> <img class="mw-logo-wordmark" alt="Wikitech" src="/static/images/mobile/copyright/wikitech-wordmark.svg" style="width: 8.75em; height: 1.6875em;"> </span> </a> </div> <div class="vector-header-end"> <div id="p-search" role="search" class="vector-search-box-vue vector-search-box-collapses vector-search-box-show-thumbnail vector-search-box-auto-expand-width vector-search-box"> <a href="/wiki/Special:Search" class="cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet cdx-button--icon-only search-toggle" title="Search Wikitech [f]" accesskey="f"><span class="vector-icon mw-ui-icon-search mw-ui-icon-wikimedia-search"></span> <span>Search</span> </a> <div class="vector-typeahead-search-container"> <div class="cdx-typeahead-search cdx-typeahead-search--show-thumbnail cdx-typeahead-search--auto-expand-width"> <form action="/w/index.php" id="searchform" class="cdx-search-input cdx-search-input--has-end-button"> <div id="simpleSearch" class="cdx-search-input__input-wrapper" data-search-loc="header-moved"> <div class="cdx-text-input cdx-text-input--has-start-icon"> <input class="cdx-text-input__input" type="search" name="search" placeholder="Search Wikitech" aria-label="Search Wikitech" autocapitalize="sentences" title="Search Wikitech [f]" accesskey="f" id="searchInput" > <span class="cdx-text-input__icon cdx-text-input__start-icon"></span> </div> <input type="hidden" name="title" value="Special:Search"> </div> <button class="cdx-button cdx-search-input__end-button">Search</button> </form> </div> </div> </div> <nav class="vector-user-links vector-user-links-wide" aria-label="Personal tools"> <div class="vector-user-links-main"> <div id="p-vector-user-menu-preferences" class="vector-menu mw-portlet" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="ca-uls" class="mw-list-item active user-links-collapsible-item"><a data-mw="interface" href="#" class="uls-trigger cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet"><span class="vector-icon mw-ui-icon-wikimedia-language mw-ui-icon-wikimedia-wikimedia-language"></span> <span>English</span></a> </li> </ul> </div> </div> <div id="p-vector-user-menu-userpage" class="vector-menu mw-portlet emptyPortlet" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> </ul> </div> </div> <nav class="vector-appearance-landmark" aria-label="Appearance"> <div id="vector-appearance-dropdown" class="vector-dropdown " title="Change the appearance of the page's font size, width, and color" > <input type="checkbox" id="vector-appearance-dropdown-checkbox" role="button" aria-haspopup="true" data-event-name="ui.dropdown-vector-appearance-dropdown" class="vector-dropdown-checkbox " aria-label="Appearance" > <label id="vector-appearance-dropdown-label" for="vector-appearance-dropdown-checkbox" class="vector-dropdown-label cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet cdx-button--icon-only " aria-hidden="true" ><span class="vector-icon mw-ui-icon-appearance mw-ui-icon-wikimedia-appearance"></span> <span class="vector-dropdown-label-text">Appearance</span> </label> <div class="vector-dropdown-content"> <div id="vector-appearance-unpinned-container" class="vector-unpinned-container"> </div> </div> </div> </nav> <div id="p-vector-user-menu-notifications" class="vector-menu mw-portlet emptyPortlet" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> </ul> </div> </div> <div id="p-vector-user-menu-overflow" class="vector-menu mw-portlet" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="pt-sitesupport-2" class="user-links-collapsible-item mw-list-item user-links-collapsible-item"><a data-mw="interface" href="https://donate.wikimedia.org/?utm_source=donate&utm_medium=sidebar&utm_campaign=spontaneous&uselang=en" class=""><span>Donate</span></a> </li> <li id="pt-login-2" class="user-links-collapsible-item mw-list-item user-links-collapsible-item"><a data-mw="interface" href="/w/index.php?title=Special:UserLogin&returnto=Password+and+2FA+reset" title="You are encouraged to log in; however, it is not mandatory [o]" accesskey="o" class=""><span>Log in</span></a> </li> </ul> </div> </div> </div> <div id="vector-user-links-dropdown" class="vector-dropdown vector-user-menu vector-button-flush-right vector-user-menu-logged-out user-links-collapsible-item" title="More options" > <input type="checkbox" id="vector-user-links-dropdown-checkbox" role="button" aria-haspopup="true" data-event-name="ui.dropdown-vector-user-links-dropdown" class="vector-dropdown-checkbox " aria-label="Personal tools" > <label id="vector-user-links-dropdown-label" for="vector-user-links-dropdown-checkbox" class="vector-dropdown-label cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet cdx-button--icon-only " aria-hidden="true" ><span class="vector-icon mw-ui-icon-ellipsis mw-ui-icon-wikimedia-ellipsis"></span> <span class="vector-dropdown-label-text">Personal tools</span> </label> <div class="vector-dropdown-content"> <div id="p-personal" class="vector-menu mw-portlet mw-portlet-personal user-links-collapsible-item" title="User menu" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="pt-sitesupport" class="user-links-collapsible-item mw-list-item"><a href="https://donate.wikimedia.org/?utm_source=donate&utm_medium=sidebar&utm_campaign=spontaneous&uselang=en"><span>Donate</span></a></li><li id="pt-login" class="user-links-collapsible-item mw-list-item"><a href="/w/index.php?title=Special:UserLogin&returnto=Password+and+2FA+reset" title="You are encouraged to log in; however, it is not mandatory [o]" accesskey="o"><span class="vector-icon mw-ui-icon-logIn mw-ui-icon-wikimedia-logIn"></span> <span>Log in</span></a></li> </ul> </div> </div> </div> </div> </nav> </div> </header> </div> <div class="mw-page-container"> <div class="mw-page-container-inner"> <div class="vector-sitenotice-container"> <div id="siteNotice"><div id="mw-dismissablenotice-anonplace"></div><script>(function(){var node=document.getElementById("mw-dismissablenotice-anonplace");if(node){node.outerHTML="\u003Cdiv class=\"mw-dismissable-notice\"\u003E\u003Cdiv class=\"mw-dismissable-notice-close\"\u003E[\u003Ca tabindex=\"0\" role=\"button\"\u003Edismiss\u003C/a\u003E]\u003C/div\u003E\u003Cdiv class=\"mw-dismissable-notice-body\"\u003E\u003C!-- CentralNotice --\u003E\u003Cdiv id=\"localNotice\" data-nosnippet=\"\"\u003E\u003Cdiv class=\"sitenotice\" lang=\"en\" dir=\"ltr\"\u003E\u003Ctable style=\"width: 75%; background-color: var(--background-color-warning-subtle, #fdf2d5); border: var(--border-subtle, 1px solid #987027); color: var(--color-base, #202122); border-radius: 10px; padding: 5px; margin: 0 auto;\"\u003E\n\u003Ctbody\u003E\u003Ctr\u003E\n\u003Ctd style=\"width:40px; height:40px; text-align:center; vertical-align:middle; padding: 2px;\"\u003E\u003Cspan typeof=\"mw:File\"\u003E\u003Ca href=\"/wiki/File:OOjs_UI_icon_alert-warning.svg\" class=\"mw-file-description\"\u003E\u003Cimg src=\"//upload.wikimedia.org/wikipedia/commons/thumb/3/3b/OOjs_UI_icon_alert-warning.svg/30px-OOjs_UI_icon_alert-warning.svg.png\" decoding=\"async\" width=\"30\" height=\"30\" class=\"mw-file-element\" srcset=\"//upload.wikimedia.org/wikipedia/commons/thumb/3/3b/OOjs_UI_icon_alert-warning.svg/45px-OOjs_UI_icon_alert-warning.svg.png 1.5x, //upload.wikimedia.org/wikipedia/commons/thumb/3/3b/OOjs_UI_icon_alert-warning.svg/60px-OOjs_UI_icon_alert-warning.svg.png 2x\" data-file-width=\"20\" data-file-height=\"20\" /\u003E\u003C/a\u003E\u003C/span\u003E\n\u003C/td\u003E\n\u003Ctd style=\"text-align:center; vertical-align: middle; padding: 4px; max-height: 60px;\"\u003E\u003Cb\u003EWe are migrating Wikitech to \u003Ca href=\"/wiki/Wikitech/SUL-migration\" title=\"Wikitech/SUL-migration\"\u003ESUL\u003C/a\u003E!\u003C/b\u003E\n\u003Cp\u003E\u003Cb\u003EAction may be required for your \u003Ca href=\"/wiki/Wikitech/SUL-migration#What_You_Should_Do\" title=\"Wikitech/SUL-migration\"\u003E account\u003C/a\u003E!\u003C/b\u003E\n\u003C/p\u003E\u003Cp\u003E\u003Cb\u003ETrouble logging in? Please visit \u003Ca href=\"https://phabricator.wikimedia.org/T376267\" class=\"extiw\" title=\"phab:T376267\"\u003ET376267\u003C/a\u003E\u003C/b\u003E\n\u003C/p\u003E\n\u003C/td\u003E\u003C/tr\u003E\u003C/tbody\u003E\u003C/table\u003E\u003C/div\u003E\u003C/div\u003E\u003C/div\u003E\u003C/div\u003E";}}());</script></div> </div> <div class="vector-column-start"> <div class="vector-main-menu-container"> <div id="mw-navigation"> <nav id="mw-panel" class="vector-main-menu-landmark" aria-label="Site"> <div id="vector-main-menu-pinned-container" class="vector-pinned-container"> </div> </nav> </div> </div> <div class="vector-sticky-pinned-container"> <nav id="mw-panel-toc" aria-label="Contents" data-event-name="ui.sidebar-toc" class="mw-table-of-contents-container vector-toc-landmark"> <div id="vector-toc-pinned-container" class="vector-pinned-container"> <div id="vector-toc" class="vector-toc vector-pinnable-element"> <div class="vector-pinnable-header vector-toc-pinnable-header vector-pinnable-header-pinned" data-feature-name="toc-pinned" data-pinnable-element-id="vector-toc" > <h2 class="vector-pinnable-header-label">Contents</h2> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-pin-button" data-event-name="pinnable-header.vector-toc.pin">move to sidebar</button> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-unpin-button" data-event-name="pinnable-header.vector-toc.unpin">hide</button> </div> <ul class="vector-toc-contents" id="mw-panel-toc-list"> <li id="toc-mw-content-text" class="vector-toc-list-item vector-toc-level-1"> <a href="#" class="vector-toc-link"> <div class="vector-toc-text">Beginning</div> </a> </li> <li id="toc-Wikimedia_account_password_reset" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#Wikimedia_account_password_reset"> <div class="vector-toc-text"> <span class="vector-toc-numb">1</span> <span>Wikimedia account password reset</span> </div> </a> <ul id="toc-Wikimedia_account_password_reset-sublist" class="vector-toc-list"> </ul> </li> <li id="toc-For_developer_account_users" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#For_developer_account_users"> <div class="vector-toc-text"> <span class="vector-toc-numb">2</span> <span>For developer account users</span> </div> </a> <ul id="toc-For_developer_account_users-sublist" class="vector-toc-list"> </ul> </li> <li id="toc-For_admins" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#For_admins"> <div class="vector-toc-text"> <span class="vector-toc-numb">3</span> <span>For admins</span> </div> </a> <button aria-controls="toc-For_admins-sublist" class="cdx-button cdx-button--weight-quiet cdx-button--icon-only vector-toc-toggle"> <span class="vector-icon mw-ui-icon-wikimedia-expand"></span> <span>Toggle For admins subsection</span> </button> <ul id="toc-For_admins-sublist" class="vector-toc-list"> <li id="toc-Ensure_the_request_is_legitimate" class="vector-toc-list-item vector-toc-level-2"> <a class="vector-toc-link" href="#Ensure_the_request_is_legitimate"> <div class="vector-toc-text"> <span class="vector-toc-numb">3.1</span> <span>Ensure the request is legitimate</span> </div> </a> <ul id="toc-Ensure_the_request_is_legitimate-sublist" class="vector-toc-list"> </ul> </li> <li id="toc-Technical_procedure_to_follow" class="vector-toc-list-item vector-toc-level-2"> <a class="vector-toc-link" href="#Technical_procedure_to_follow"> <div class="vector-toc-text"> <span class="vector-toc-numb">3.2</span> <span>Technical procedure to follow</span> </div> </a> <ul id="toc-Technical_procedure_to_follow-sublist" class="vector-toc-list"> </ul> </li> </ul> </li> <li id="toc-Two-factor_authentication_removal" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#Two-factor_authentication_removal"> <div class="vector-toc-text"> <span class="vector-toc-numb">4</span> <span>Two-factor authentication removal</span> </div> </a> <button aria-controls="toc-Two-factor_authentication_removal-sublist" class="cdx-button cdx-button--weight-quiet cdx-button--icon-only vector-toc-toggle"> <span class="vector-icon mw-ui-icon-wikimedia-expand"></span> <span>Toggle Two-factor authentication removal subsection</span> </button> <ul id="toc-Two-factor_authentication_removal-sublist" class="vector-toc-list"> <li id="toc-Wikimedia_two_factor_authentication_removal" class="vector-toc-list-item vector-toc-level-2"> <a class="vector-toc-link" href="#Wikimedia_two_factor_authentication_removal"> <div class="vector-toc-text"> <span class="vector-toc-numb">4.1</span> <span>Wikimedia two factor authentication removal</span> </div> </a> <ul id="toc-Wikimedia_two_factor_authentication_removal-sublist" class="vector-toc-list"> </ul> </li> <li id="toc-Phabricator_two_factor_authentication_removal" class="vector-toc-list-item vector-toc-level-2"> <a class="vector-toc-link" href="#Phabricator_two_factor_authentication_removal"> <div class="vector-toc-text"> <span class="vector-toc-numb">4.2</span> <span>Phabricator two factor authentication removal</span> </div> </a> <ul id="toc-Phabricator_two_factor_authentication_removal-sublist" class="vector-toc-list"> </ul> </li> </ul> </li> <li id="toc-Reset_user_password_in_LDAP" class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded"> <a class="vector-toc-link" href="#Reset_user_password_in_LDAP"> <div class="vector-toc-text"> <span class="vector-toc-numb">5</span> <span>Reset user password in LDAP</span> </div> </a> <ul id="toc-Reset_user_password_in_LDAP-sublist" class="vector-toc-list"> </ul> </li> </ul> </div> </div> </nav> </div> </div> <div class="mw-content-container"> <main id="content" class="mw-body"> <header class="mw-body-header vector-page-titlebar"> <nav aria-label="Contents" class="vector-toc-landmark"> <div id="vector-page-titlebar-toc" class="vector-dropdown vector-page-titlebar-toc vector-button-flush-left" > <input type="checkbox" id="vector-page-titlebar-toc-checkbox" role="button" aria-haspopup="true" data-event-name="ui.dropdown-vector-page-titlebar-toc" class="vector-dropdown-checkbox " aria-label="Toggle the table of contents" > <label id="vector-page-titlebar-toc-label" for="vector-page-titlebar-toc-checkbox" class="vector-dropdown-label cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet cdx-button--icon-only " aria-hidden="true" ><span class="vector-icon mw-ui-icon-listBullet mw-ui-icon-wikimedia-listBullet"></span> <span class="vector-dropdown-label-text">Toggle the table of contents</span> </label> <div class="vector-dropdown-content"> <div id="vector-page-titlebar-toc-unpinned-container" class="vector-unpinned-container"> </div> </div> </div> </nav> <h1 id="firstHeading" class="firstHeading mw-first-heading"><span class="mw-page-title-main">Password and 2FA reset</span></h1> </header> <div class="vector-page-toolbar"> <div class="vector-page-toolbar-container"> <div id="left-navigation"> <nav aria-label="Namespaces"> <div id="p-associated-pages" class="vector-menu vector-menu-tabs mw-portlet mw-portlet-associated-pages" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="ca-nstab-main" class="selected vector-tab-noicon mw-list-item"><a href="/wiki/Password_and_2FA_reset" title="View the content page [c]" accesskey="c"><span>Page</span></a></li><li id="ca-talk" class="vector-tab-noicon mw-list-item"><a href="/wiki/Talk:Password_and_2FA_reset" rel="discussion" title="Discussion about the content page [t]" accesskey="t"><span>Discussion</span></a></li> </ul> </div> </div> <div id="vector-variants-dropdown" class="vector-dropdown emptyPortlet" > <input type="checkbox" id="vector-variants-dropdown-checkbox" role="button" aria-haspopup="true" data-event-name="ui.dropdown-vector-variants-dropdown" class="vector-dropdown-checkbox " aria-label="Change language variant" > <label id="vector-variants-dropdown-label" for="vector-variants-dropdown-checkbox" class="vector-dropdown-label cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet" aria-hidden="true" ><span class="vector-dropdown-label-text">English</span> </label> <div class="vector-dropdown-content"> <div id="p-variants" class="vector-menu mw-portlet mw-portlet-variants emptyPortlet" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> </ul> </div> </div> </div> </div> </nav> </div> <div id="right-navigation" class="vector-collapsible"> <nav aria-label="Views"> <div id="p-views" class="vector-menu vector-menu-tabs mw-portlet mw-portlet-views" > <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="ca-view" class="selected vector-tab-noicon mw-list-item"><a href="/wiki/Password_and_2FA_reset"><span>Read</span></a></li><li id="ca-viewsource" class="vector-tab-noicon mw-list-item"><a href="/w/index.php?title=Password_and_2FA_reset&action=edit" title="This page is protected.
You can view its source [e]" accesskey="e"><span>View source</span></a></li><li id="ca-history" class="vector-tab-noicon mw-list-item"><a href="/w/index.php?title=Password_and_2FA_reset&action=history" title="Past revisions of this page [h]" accesskey="h"><span>View history</span></a></li> </ul> </div> </div> </nav> <nav class="vector-page-tools-landmark" aria-label="Page tools"> <div id="vector-page-tools-dropdown" class="vector-dropdown vector-page-tools-dropdown" > <input type="checkbox" id="vector-page-tools-dropdown-checkbox" role="button" aria-haspopup="true" data-event-name="ui.dropdown-vector-page-tools-dropdown" class="vector-dropdown-checkbox " aria-label="Tools" > <label id="vector-page-tools-dropdown-label" for="vector-page-tools-dropdown-checkbox" class="vector-dropdown-label cdx-button cdx-button--fake-button cdx-button--fake-button--enabled cdx-button--weight-quiet" aria-hidden="true" ><span class="vector-dropdown-label-text">Tools</span> </label> <div class="vector-dropdown-content"> <div id="vector-page-tools-unpinned-container" class="vector-unpinned-container"> <div id="vector-page-tools" class="vector-page-tools vector-pinnable-element"> <div class="vector-pinnable-header vector-page-tools-pinnable-header vector-pinnable-header-unpinned" data-feature-name="page-tools-pinned" data-pinnable-element-id="vector-page-tools" data-pinned-container-id="vector-page-tools-pinned-container" data-unpinned-container-id="vector-page-tools-unpinned-container" > <div class="vector-pinnable-header-label">Tools</div> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-pin-button" data-event-name="pinnable-header.vector-page-tools.pin">move to sidebar</button> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-unpin-button" data-event-name="pinnable-header.vector-page-tools.unpin">hide</button> </div> <div id="p-cactions" class="vector-menu mw-portlet mw-portlet-cactions emptyPortlet vector-has-collapsible-items" title="More options" > <div class="vector-menu-heading"> Actions </div> <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="ca-more-view" class="selected vector-more-collapsible-item mw-list-item"><a href="/wiki/Password_and_2FA_reset"><span>Read</span></a></li><li id="ca-more-viewsource" class="vector-more-collapsible-item mw-list-item"><a href="/w/index.php?title=Password_and_2FA_reset&action=edit"><span>View source</span></a></li><li id="ca-more-history" class="vector-more-collapsible-item mw-list-item"><a href="/w/index.php?title=Password_and_2FA_reset&action=history"><span>View history</span></a></li> </ul> </div> </div> <div id="p-tb" class="vector-menu mw-portlet mw-portlet-tb" > <div class="vector-menu-heading"> General </div> <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="t-whatlinkshere" class="mw-list-item"><a href="/wiki/Special:WhatLinksHere/Password_and_2FA_reset" title="A list of all wiki pages that link here [j]" accesskey="j"><span>What links here</span></a></li><li id="t-recentchangeslinked" class="mw-list-item"><a href="/wiki/Special:RecentChangesLinked/Password_and_2FA_reset" rel="nofollow" title="Recent changes in pages linked from this page [k]" accesskey="k"><span>Related changes</span></a></li><li id="t-specialpages" class="mw-list-item"><a href="/wiki/Special:SpecialPages" title="A list of all special pages [q]" accesskey="q"><span>Special pages</span></a></li><li id="t-permalink" class="mw-list-item"><a href="/w/index.php?title=Password_and_2FA_reset&oldid=2244689" title="Permanent link to this revision of this page"><span>Permanent link</span></a></li><li id="t-info" class="mw-list-item"><a href="/w/index.php?title=Password_and_2FA_reset&action=info" title="More information about this page"><span>Page information</span></a></li><li id="t-cite" class="mw-list-item"><a href="/w/index.php?title=Special:CiteThisPage&page=Password_and_2FA_reset&id=2244689&wpFormIdentifier=titleform" title="Information on how to cite this page"><span>Cite this page</span></a></li><li id="t-urlshortener" class="mw-list-item"><a href="/w/index.php?title=Special:UrlShortener&url=https%3A%2F%2Fwikitech.wikimedia.org%2Fwiki%2FPassword_and_2FA_reset"><span>Get shortened URL</span></a></li><li id="t-urlshortener-qrcode" class="mw-list-item"><a href="/w/index.php?title=Special:QrCode&url=https%3A%2F%2Fwikitech.wikimedia.org%2Fwiki%2FPassword_and_2FA_reset"><span>Download QR code</span></a></li> </ul> </div> </div> <div id="p-coll-print_export" class="vector-menu mw-portlet mw-portlet-coll-print_export" > <div class="vector-menu-heading"> Print/export </div> <div class="vector-menu-content"> <ul class="vector-menu-content-list"> <li id="coll-create_a_book" class="mw-list-item"><a href="/w/index.php?title=Special:Book&bookcmd=book_creator&referer=Password+and+2FA+reset"><span>Create a book</span></a></li><li id="coll-download-as-rl" class="mw-list-item"><a href="/w/index.php?title=Special:DownloadAsPdf&page=Password_and_2FA_reset&action=show-download-screen"><span>Download as PDF</span></a></li><li id="t-print" class="mw-list-item"><a href="/w/index.php?title=Password_and_2FA_reset&printable=yes" title="Printable version of this page [p]" accesskey="p"><span>Printable version</span></a></li> </ul> </div> </div> </div> </div> </div> </div> </nav> </div> </div> </div> <div class="vector-column-end"> <div class="vector-sticky-pinned-container"> <nav class="vector-page-tools-landmark" aria-label="Page tools"> <div id="vector-page-tools-pinned-container" class="vector-pinned-container"> </div> </nav> <nav class="vector-appearance-landmark" aria-label="Appearance"> <div id="vector-appearance-pinned-container" class="vector-pinned-container"> <div id="vector-appearance" class="vector-appearance vector-pinnable-element"> <div class="vector-pinnable-header vector-appearance-pinnable-header vector-pinnable-header-pinned" data-feature-name="appearance-pinned" data-pinnable-element-id="vector-appearance" data-pinned-container-id="vector-appearance-pinned-container" data-unpinned-container-id="vector-appearance-unpinned-container" > <div class="vector-pinnable-header-label">Appearance</div> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-pin-button" data-event-name="pinnable-header.vector-appearance.pin">move to sidebar</button> <button class="vector-pinnable-header-toggle-button vector-pinnable-header-unpin-button" data-event-name="pinnable-header.vector-appearance.unpin">hide</button> </div> </div> </div> </nav> </div> </div> <div id="bodyContent" class="vector-body" aria-labelledby="firstHeading" data-mw-ve-target-container> <div class="vector-body-before-content"> <div class="mw-indicators"> </div> <div id="siteSub" class="noprint">From Wikitech</div> </div> <div id="contentSub"><div id="mw-content-subtitle"></div></div> <div id="mw-content-text" class="mw-body-content"><div class="mw-content-ltr mw-parser-output" lang="en" dir="ltr"><p>This document offers guidance when a Wikimedia user loses access to their account and can't login. </p> <meta property="mw:PageProp/toc"/> <div class="mw-heading mw-heading2 ext-discussiontools-init-section"><h2 id="Wikimedia_account_password_reset" data-mw-thread-id="h-Wikimedia_account_password_reset"><span data-mw-comment-start="" id="h-Wikimedia_account_password_reset"></span><span id="Wikimedia_SUL_account"></span>Wikimedia account password reset<span data-mw-comment-end="h-Wikimedia_account_password_reset"></span></h2></div> <style data-mw-deduplicate="TemplateStyles:r2199624">.mw-parser-output .mw-tpl-rellink{font-style:italic;padding-bottom:0.4em;padding-left:0;margin-bottom:0.4em;color:#555;border-bottom:1px solid var(--border-color-base,#a2a9b1)}</style> <div class="rellink mw-tpl-rellink">See also: <a href="/wiki/Password_and_2FA_reset/Confirming_identities" title="Password and 2FA reset/Confirming identities">Password and 2FA reset/Confirming identities</a></div> <p>A user can't login if two conditions are met: </p> <ul><li>they have a blank or incorrect email address;</li> <li>they have forgotten their password.</li></ul> <p>In such a case, there is a need to <b>avoid social engineering</b>: it's necessary to ensure that the user making the request has a legitimate claim to the user account in question. A good point to check is if the requester's e-mail address can be legitimately linked with the user. </p> <div class="mw-heading mw-heading2 ext-discussiontools-init-section"><h2 id="For_developer_account_users" data-mw-thread-id="h-For_developer_account_users"><span data-mw-comment-start="" id="h-For_developer_account_users"></span>For developer account users<span data-mw-comment-end="h-For_developer_account_users"></span></h2></div> <p>Before requesting a password reset from an administrator, try to <a class="external text" href="https://idm.wikimedia.org/wikimedia/password/">self-reset the password</a>. If that doesn't work for you user and: </p> <ul><li>you need your password to be reset, or</li> <li>you need your two-factor authentication to be disabled</li></ul> <p>You need to <a class="external text" href="https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?title=Account+recovery+help+needed+for+Developer+account+%5BYOUR+USERNAME%5D&owner=&description=I+%5Blost%2C+upgraded%5D+my+%5Bphone%2C+laptop%5D+and+have+lost+my+%5Bpassword%2C+2FA+token%5D+for+logging+into+%5BGitLab%2C+Gerrit%2C+Phabricator%2C+Toolsadmin%5D+using+my+Developer+account.+Please+%5Breset+my+password%2C+disable+2FA+on+my+account%5D+so+that+I+can+continue+using+my+Developer+account.&projects=cloud-services-team%2C+trust-and-safety&priority=medium">open a new phabricator task</a> adding <code>cloud-services-team</code> and <code>Trust-and-Safety</code> as Tags. </p><p>Be prepared to answer questions to validate your identity. Often the easiest verification method is to show that you still have control of the ssh private key associated with your <a href="https://www.mediawiki.org/wiki/Developer_account" class="extiw" title="mw:Developer account">Developer account</a>. This can be done by creating a text file as your Developer account on a Cloud VPS or Toolforge bastion server which references the Phabricator task you created: </p> <div class="wt-codesample-wrapper wt-codesample-dark"><style data-mw-deduplicate="TemplateStyles:r2244496">.mw-parser-output .wt-codesample-wrapper{margin:1em 0}.mw-parser-output .wt-codesample-header{display:flex}.mw-parser-output .wt-codesample-header div{border-color:#c8ccd1;border-style:solid;border-width:0}.mw-parser-output .wt-codesample-header .wt-codesample-title{font-weight:bold;padding:.5em 1em;border-width:1px 1px 0 1px;border-radius:.5em .5em 0 0}.mw-parser-output .wt-codesample-header .wt-codesample-fill{border-width:0 0 1px 0;flex:2}.mw-parser-output .wt-codesample-wrapper pre{margin:0}.mw-parser-output .wt-codesample-header+.mw-highlight pre{border-top:none}.mw-parser-output .wt-codesample-wrapper div.mw-highlight{margin-top:0}</style><style data-mw-deduplicate="TemplateStyles:r1877433">.mw-parser-output .wt-codesample-dark .wt-codesample-title{color:#93a1a1;background:#073642}.mw-parser-output .wt-codesample-dark .wt-codesample-header div{border-color:#839496}.mw-parser-output .wt-codesample-dark pre{color:#839496;background-color:#002b36;border-color:#839496}.mw-parser-output .wt-codesample-dark .lineno{color:#93a1a1}.mw-parser-output .wt-codesample-dark .hll{background-color:#ffffcc}.mw-parser-output .wt-codesample-dark .c{color:#586e75;font-style:italic}.mw-parser-output .wt-codesample-dark .err{color:#dc322f}.mw-parser-output .wt-codesample-dark .g{color:#839496}.mw-parser-output .wt-codesample-dark .k{color:#859900}.mw-parser-output .wt-codesample-dark .l{color:#839496}.mw-parser-output .wt-codesample-dark .n{color:#93a1a1}.mw-parser-output .wt-codesample-dark .o{color:#839496}.mw-parser-output .wt-codesample-dark .x{color:#839496}.mw-parser-output .wt-codesample-dark .p{color:#839496}.mw-parser-output .wt-codesample-dark .ch{color:#586e75;font-style:italic}.mw-parser-output .wt-codesample-dark .cm{color:#586e75;font-style:italic}.mw-parser-output .wt-codesample-dark .cp{color:#586e75;font-style:italic}.mw-parser-output .wt-codesample-dark .cpf{color:#586e75;font-style:italic}.mw-parser-output .wt-codesample-dark .c1{color:#586e75;font-style:italic}.mw-parser-output .wt-codesample-dark .cs{color:#586e75;font-style:italic}.mw-parser-output .wt-codesample-dark .gd{color:#839496}.mw-parser-output .wt-codesample-dark .ge{color:#839496}.mw-parser-output .wt-codesample-dark .gr{color:#839496}.mw-parser-output .wt-codesample-dark .gh{color:#839496}.mw-parser-output .wt-codesample-dark .gi{color:#839496}.mw-parser-output .wt-codesample-dark .go{color:#839496}.mw-parser-output .wt-codesample-dark .gp{color:#839496}.mw-parser-output .wt-codesample-dark .gs{color:#839496}.mw-parser-output .wt-codesample-dark .gu{color:#839496}.mw-parser-output .wt-codesample-dark .gt{color:#839496}.mw-parser-output .wt-codesample-dark .kc{color:#859900}.mw-parser-output .wt-codesample-dark .kd{color:#859900}.mw-parser-output .wt-codesample-dark .kn{color:#cb4b16}.mw-parser-output .wt-codesample-dark .kp{color:#cb4b16}.mw-parser-output .wt-codesample-dark .kr{color:#859900}.mw-parser-output .wt-codesample-dark .kt{color:#859900}.mw-parser-output .wt-codesample-dark .ld{color:#839496}.mw-parser-output .wt-codesample-dark .m{color:#2aa198}.mw-parser-output .wt-codesample-dark .s{color:#2aa198}.mw-parser-output .wt-codesample-dark .na{color:#839496}.mw-parser-output .wt-codesample-dark .nb{color:#268bd2}.mw-parser-output .wt-codesample-dark .nc{color:#268bd2}.mw-parser-output .wt-codesample-dark .no{color:#b58900}.mw-parser-output .wt-codesample-dark .nd{color:#cb4b16}.mw-parser-output .wt-codesample-dark .ni{color:#cb4b16}.mw-parser-output .wt-codesample-dark .ne{color:#cb4b16}.mw-parser-output .wt-codesample-dark .nf{color:#268bd2}.mw-parser-output .wt-codesample-dark .nl{color:#839496}.mw-parser-output .wt-codesample-dark .nn{color:#b58900}.mw-parser-output .wt-codesample-dark .nx{color:#839496}.mw-parser-output .wt-codesample-dark .py{color:#268bd2}.mw-parser-output .wt-codesample-dark .nt{color:#859900}.mw-parser-output .wt-codesample-dark .nv{color:#cb4b16}.mw-parser-output .wt-codesample-dark .ow{color:#859900}.mw-parser-output .wt-codesample-dark .w{color:#002b36}.mw-parser-output .wt-codesample-dark .mb{color:#2aa198}.mw-parser-output .wt-codesample-dark .mf{color:#2aa198}.mw-parser-output .wt-codesample-dark .mh{color:#2aa198}.mw-parser-output .wt-codesample-dark .mi{color:#2aa198}.mw-parser-output .wt-codesample-dark .mo{color:#2aa198}.mw-parser-output .wt-codesample-dark .sa{color:#2aa198}.mw-parser-output .wt-codesample-dark .sb{color:#2aa198}.mw-parser-output .wt-codesample-dark .sc{color:#2aa198}.mw-parser-output .wt-codesample-dark .dl{color:#2aa198}.mw-parser-output .wt-codesample-dark .sd{color:#2aa198}.mw-parser-output .wt-codesample-dark .s2{color:#2aa198}.mw-parser-output .wt-codesample-dark .se{color:#cb4b16}.mw-parser-output .wt-codesample-dark .sh{color:#2aa198}.mw-parser-output .wt-codesample-dark .si{color:#cb4b16}.mw-parser-output .wt-codesample-dark .sx{color:#2aa198}.mw-parser-output .wt-codesample-dark .sr{color:#2aa198}.mw-parser-output .wt-codesample-dark .s1{color:#2aa198}.mw-parser-output .wt-codesample-dark .ss{color:#2aa198}.mw-parser-output .wt-codesample-dark .bp{color:#268bd2;font-weight:bold}.mw-parser-output .wt-codesample-dark .fm{color:#268bd2}.mw-parser-output .wt-codesample-dark .vc{color:#268bd2}.mw-parser-output .wt-codesample-dark .vg{color:#268bd2}.mw-parser-output .wt-codesample-dark .vi{color:#268bd2}.mw-parser-output .wt-codesample-dark .vm{color:#cb4b16}.mw-parser-output .wt-codesample-dark .il{color:#2aa198}</style><div class="mw-highlight mw-highlight-lang-shell-session mw-content-ltr" dir="ltr"><pre><span></span><span class="gp">$ </span>ssh<span class="w"> </span>bastion.wmcloud.org<span class="w"> </span><span class="c1"># or `ssh login.toolforge.org`</span> <span class="gp">$ </span><span class="nb">cd</span><span class="w"> </span><span class="nv">$HOME</span> <span class="gp">$ </span>install<span class="w"> </span>-m0600<span class="w"> </span>/dev/null<span class="w"> </span>2fa-reset-request.txt <span class="gp">$ </span><span class="nb">echo</span><span class="w"> </span><span class="s2">"https://phabricator.wikimedia.org/[YOUR PHABRICATOR TASK NUMBER]"</span><span class="w"> </span>><span class="w"> </span>2fa-reset-request.txt <span class="gp">$ </span><span class="nb">echo</span><span class="w"> </span><span class="s2">"</span><span class="k">$(</span>hostname<span class="w"> </span>-f<span class="k">)</span><span class="s2">:</span><span class="k">$(</span><span class="nb">pwd</span><span class="k">)</span><span class="s2">/2fa-reset-request.txt"</span> </pre></div> </div> <p>Then make a comment on the Phabricator task including the output of the last command so that the person who helps you can find the verification file easily. </p> <div class="mw-heading mw-heading2 ext-discussiontools-init-section"><h2 id="For_admins" data-mw-thread-id="h-For_admins"><span data-mw-comment-start="" id="h-For_admins"></span>For admins<span data-mw-comment-end="h-For_admins"></span></h2></div> <div class="mw-heading mw-heading3"><h3 id="Ensure_the_request_is_legitimate" data-mw-thread-id="h-Ensure_the_request_is_legitimate-For_admins"><span data-mw-comment-start="" id="h-Ensure_the_request_is_legitimate-For_admins"></span>Ensure the request is legitimate<span data-mw-comment-end="h-Ensure_the_request_is_legitimate-For_admins"></span></h3></div> <p>Make sure the request is legit. This part is covered at <a href="/wiki/Password_reset/Confirming_identities" class="mw-redirect" title="Password reset/Confirming identities">Password reset/Confirming identities</a>. </p><p>Especially, someone from Trust & Safety should be notified of the password reset. It might also be a good idea to pass things to them if there are not enough elements to confirm the identity. </p> <div class="mw-heading mw-heading3"><h3 id="Technical_procedure_to_follow" data-mw-thread-id="h-Technical_procedure_to_follow-For_admins"><span data-mw-comment-start="" id="h-Technical_procedure_to_follow-For_admins"></span>Technical procedure to follow<span data-mw-comment-end="h-Technical_procedure_to_follow-For_admins"></span></h3></div> <ul><li>On a <a href="/wiki/Maintenance_server" title="Maintenance server">maintenance server</a>, run <code>mwscript resetUserEmail.php --wiki=<user's home wiki> <username> <new email></code></li> <li>In your browser, go to <a href="/wiki/Special:PasswordReset" title="Special:PasswordReset">Special:PasswordReset</a> on the user's main wiki.</li> <li>Type in the user's name, leave the e-mail address blank and click "Reset password".</li> <li>Ask the requester to check their inbox to ensure that the password reset email was received.</li></ul> <p>Notes: </p> <ul><li>The home wiki shouldn't matter much.</li> <li>MediaWiki usernames can contain UTF-8 characters. If you have difficulty using them on the terminal, you can instead use the user id prefixed with #.</li></ul> <style data-mw-deduplicate="TemplateStyles:r2232208">.mw-parser-output .collapse-top{background:#CCFFCC;color:inherit}@media screen{html.skin-theme-clientpref-night .mw-parser-output .collapse-top{background:#003500}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .collapse-top{background:#003500}}.mw-parser-output .collapse-content{color:var(--color-base,#202122);background:var(--background-color-base,#000);border:1px solid var(--border-color-base,#a2a9b1)}</style> <table class="navbox mw-collapsible mw-collapsed" style="text-align: left; border: 1px solid silver; margin-top: 0.2em;"> <tbody><tr> <th class="collapse-top">Old instructions in case something goes wrong </th></tr> <tr> <td class="collapse-content" style="padding: 8px;"> <ul><li><tt>mwscript eval.php --wiki=<user's main wiki></tt></li> <li><tt>$user = User::newFromName('<name>');</tt></li> <li><tt>$user->setEmail('<email>');</tt></li> <li><tt>$user->setEmailAuthenticationTimestamp( wfTimestampNow() );</tt></li> <li><tt>$user->saveSettings();</tt></li></ul> <p>On CentralAuth wikis, the eval.php script has the effect of updating the globaluser table (gu_email and gu_email_authenticated) and then clearing the relevant memcached key. </p> </td></tr></tbody></table> <div class="mw-heading mw-heading2 ext-discussiontools-init-section"><h2 id="Two-factor_authentication_removal" data-mw-thread-id="h-Two-factor_authentication_removal"><span data-mw-comment-start="" id="h-Two-factor_authentication_removal"></span>Two-factor authentication removal<span data-mw-comment-end="h-Two-factor_authentication_removal"></span></h2></div> <p>Before following these steps, if the user has an existing device available that has worked with 2FA in the past but has suddenly ceased working, ensure the user's 2FA device has an accurate clock. The clue is in the name of the 2FA method we use - Time-based One-time Password Algorithm - if the clock on the device is too far off, it will generate the wrong codes. Even a two minute difference can cause this. </p> <div class="mw-heading mw-heading3"><h3 id="Wikimedia_two_factor_authentication_removal" data-mw-thread-id="h-Wikimedia_two_factor_authentication_removal-Two-factor_authentication_removal"><span data-mw-comment-start="" id="h-Wikimedia_two_factor_authentication_removal-Two-factor_authentication_removal"></span><span id="Reset_two_factor_authentication"></span><span id="Wikimedia_or_wikitech_two_factor_authentication_removal"></span>Wikimedia two factor authentication removal<span data-mw-comment-end="h-Wikimedia_two_factor_authentication_removal-Two-factor_authentication_removal"></span></h3></div> <p><b>Be careful!</b> This process is highly vulnerable to social-engineering attacks. Don't reset things just because a user asked you on IRC or via email. Before resetting someone's login, be sure to confirm their identity: </p> <ul><li>If you recognize them, have a face-to-face meeting or one in a video chat.</li> <li>If someone on WMF staff recognizes them, have a three-way video chat where a staffmember vouches.</li></ul> <p>For SUL (Wikipedia etc.) 2FA, determine a wiki on which the user exists locally (i.e. has contributions), and then run the script on a <a href="/wiki/Maintenance_server" title="Maintenance server">maintenance server</a> using that wiki: </p> <div class="mw-highlight mw-highlight-lang-bash mw-content-ltr" dir="ltr"><pre><span></span>mwscript<span class="w"> </span>extensions/OATHAuth/maintenance/disableOATHAuthForUser.php<span class="w"> </span>--wiki<span class="o">=</span><wiki><span class="w"> </span><username> </pre></div> <p>Privileged user groups may also use <a href="/wiki/Special:DisableOATHForUser" title="Special:DisableOATHForUser">Special:DisableOATHForUser</a> to remove 2FA from any user account. Its use is logged at <a href="/wiki/Special:Log/oath" title="Special:Log/oath">Special:Log/oath</a>. This requires the <kbd>oathauth-disable-for-user</kbd> right. On Wikimedia Foundation production wikis members of the <a href="https://meta.wikimedia.org/wiki/Special:GlobalUsers/staff" class="extiw" title="m:Special:GlobalUsers/staff">Staff</a> and <a href="https://meta.wikimedia.org/wiki/Special:GlobalUsers/sysadmin" class="extiw" title="m:Special:GlobalUsers/sysadmin">System administrator</a> global groups, and <a href="https://meta.wikimedia.org/wiki/Special:ListUsers/wmf-supportsafety" class="extiw" title="m:Special:ListUsers/wmf-supportsafety">WMF Trust and Safety</a> local Meta-Wiki group have it. </p><p>The user can then log in using just their password and re-add two factor authentication. </p> <div class="mw-heading mw-heading3"><h3 id="Phabricator_two_factor_authentication_removal" data-mw-thread-id="h-Phabricator_two_factor_authentication_removal-Two-factor_authentication_removal"><span data-mw-comment-start="" id="h-Phabricator_two_factor_authentication_removal-Two-factor_authentication_removal"></span>Phabricator two factor authentication removal<span data-mw-comment-end="h-Phabricator_two_factor_authentication_removal-Two-factor_authentication_removal"></span></h3></div> <ul><li>Requesting a 2FA reset for a Phabricator account: <a href="https://www.mediawiki.org/wiki/Phabricator/Help/Two-factor_Authentication_Resets" class="extiw" title="mw:Phabricator/Help/Two-factor Authentication Resets">mw:Phabricator/Help/Two-factor Authentication Resets</a></li> <li>Performing a reset as a Phabricator admin with shell access: <a href="/wiki/Phabricator#Removing_Two_Factor_Authentication" title="Phabricator">Phabricator#Removing Two Factor Authentication</a></li></ul> <div class="mw-heading mw-heading2 ext-discussiontools-init-section"><h2 id="Reset_user_password_in_LDAP" data-mw-thread-id="h-Reset_user_password_in_LDAP"><span data-mw-comment-start="" id="h-Reset_user_password_in_LDAP"></span>Reset user password in LDAP<span data-mw-comment-end="h-Reset_user_password_in_LDAP"></span></h2></div> <p>To reset a user password for a developer account, a root or member of admin group ldap-admins can: </p> <ul><li>install the <b>slappasswd</b> utility locally (it's inside the <b>slapd</b> package)</li> <li>use slappasswd to hash a new password (SSHA password)</li> <li>ssh to an ldap-maint server (ssh ldap-maint1001.eqiad.wmnet)</li> <li>run <code>sudo modify-ldap-user <username></code> (replace <code><username></code> with the actual user)</li> <li>paste the SSHA password hash line and :wq</li> <li>when logging in ensure the exact spelling is used, capitalization matters and not just the first letter either</li></ul>    </div><noscript><img src="https://login.wikimedia.org/wiki/Special:CentralAutoLogin/start?type=1x1" alt="" width="1" height="1" style="border: none; position: absolute;"></noscript> <div class="printfooter" data-nosnippet="">Retrieved from "<a dir="ltr" href="https://wikitech.wikimedia.org/w/index.php?title=Password_and_2FA_reset&oldid=2244689">https://wikitech.wikimedia.org/w/index.php?title=Password_and_2FA_reset&oldid=2244689</a>"</div></div> <div id="catlinks" class="catlinks" data-mw="interface"><div id="mw-normal-catlinks" class="mw-normal-catlinks"><a href="/wiki/Special:Categories" title="Special:Categories">Category</a>: <ul><li><a href="/wiki/Category:How-To" title="Category:How-To">How-To</a></li></ul></div></div> </div> </main> </div> <div class="mw-footer-container"> <footer id="footer" class="mw-footer" > <ul id="footer-info"> <li id="footer-info-lastmod"> This page was last edited on 15 November 2024, at 14:38.</li> <li id="footer-info-copyright">Text is available under the <a rel="nofollow" class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-ShareAlike License</a>; additional terms may apply. See <a class="external text" href="https://foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Terms_of_Use">Terms of Use</a> for details.</li> </ul> <ul id="footer-places"> <li id="footer-places-privacy"><a href="https://foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Privacy_policy">Privacy policy</a></li> <li id="footer-places-about"><a href="/wiki/Main_Page">About Wikitech</a></li> <li id="footer-places-disclaimers"><a href="https://foundation.wikimedia.org/wiki/General_disclaimer">Disclaimers</a></li> <li id="footer-places-wm-codeofconduct"><a href="https://www.mediawiki.org/wiki/Special:MyLanguage/Code_of_Conduct">Code of Conduct</a></li> <li id="footer-places-developers"><a href="https://developer.wikimedia.org">Developers</a></li> <li id="footer-places-statslink"><a href="https://stats.wikimedia.org/#/wikitech.wikimedia.org">Statistics</a></li> <li id="footer-places-cookiestatement"><a href="https://foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Cookie_statement">Cookie statement</a></li> <li id="footer-places-mobileview"><a href="//wikitech.wikimedia.org/w/index.php?title=Password_and_2FA_reset&mobileaction=toggle_view_mobile" class="noprint stopMobileRedirectToggle">Mobile view</a></li> </ul> <ul id="footer-icons" class="noprint"> <li id="footer-copyrightico"><a href="https://wikimediafoundation.org/" class="cdx-button cdx-button--fake-button cdx-button--size-large cdx-button--fake-button--enabled"><img src="/static/images/footer/wikimedia-button.svg" width="84" height="29" alt="Wikimedia Foundation" loading="lazy"></a></li> <li id="footer-poweredbyico"><a href="https://www.mediawiki.org/" class="cdx-button cdx-button--fake-button cdx-button--size-large cdx-button--fake-button--enabled"><img src="/w/resources/assets/poweredby_mediawiki.svg" alt="Powered by MediaWiki" width="88" height="31" loading="lazy"></a></li> </ul> </footer> </div> </div> </div> <div class="vector-settings" id="p-dock-bottom"> <ul></ul> </div><script>(RLQ=window.RLQ||[]).push(function(){mw.config.set({"wgHostname":"mw-web.codfw.main-84d8f4b96-7c9bp","wgBackendResponseTime":90,"wgDiscussionToolsPageThreads":[{"headingLevel":2,"name":"h-","type":"heading","level":0,"id":"h-Wikimedia_account_password_reset","replies":[]},{"headingLevel":2,"name":"h-","type":"heading","level":0,"id":"h-For_developer_account_users","replies":[]},{"headingLevel":2,"name":"h-","type":"heading","level":0,"id":"h-For_admins","replies":[{"headingLevel":3,"name":"h-","type":"heading","level":0,"id":"h-Ensure_the_request_is_legitimate-For_admins","replies":[]},{"headingLevel":3,"name":"h-","type":"heading","level":0,"id":"h-Technical_procedure_to_follow-For_admins","replies":[]}]},{"headingLevel":2,"name":"h-","type":"heading","level":0,"id":"h-Two-factor_authentication_removal","replies":[{"headingLevel":3,"name":"h-","type":"heading","level":0,"id":"h-Wikimedia_two_factor_authentication_removal-Two-factor_authentication_removal","replies":[]},{"headingLevel":3,"name":"h-","type":"heading","level":0,"id":"h-Phabricator_two_factor_authentication_removal-Two-factor_authentication_removal","replies":[]}]},{"headingLevel":2,"name":"h-","type":"heading","level":0,"id":"h-Reset_user_password_in_LDAP","replies":[]}],"wgPageParseReport":{"discussiontools":{"limitreport-timeusage":"0.012"},"limitreport":{"cputime":"0.094","walltime":"0.178","ppvisitednodes":{"value":260,"limit":1000000},"postexpandincludesize":{"value":1407,"limit":2097152},"templateargumentsize":{"value":699,"limit":2097152},"expansiondepth":{"value":7,"limit":100},"expensivefunctioncount":{"value":2,"limit":500},"unstrip-depth":{"value":0,"limit":20},"unstrip-size":{"value":7936,"limit":5000000},"timingprofile":["100.00% 146.723 1 -total"," 80.95% 118.768 1 Template:Codesample"," 7.18% 10.540 1 Template:See_also"," 6.86% 10.061 1 Template:Collapse_top"," 5.30% 7.774 1 Template:See"," 2.61% 3.827 3 Template:Anchor"," 1.95% 2.858 1 Template:Collapse_bottom"]},"cachereport":{"origin":"mw-api-ext.codfw.main-5d6cbfccfb-ndp79","timestamp":"20241115143857","ttl":2592000,"transientcontent":false}}});});</script> </body> </html>