Reset login passwords on Mac
There are multiple methods for resetting a forgotten login password on a Mac, depending on the account type and system setup. If the user has an Apple Account linked, they may be able to reset the password using that. For local accounts, options like using another administrator account or macOS Recovery mode might be needed.
Understanding methods like the following helps you quickly restore user access while maintaining system security:
If you know another administrator account: To reset a user’s password on a Mac, log in with an administrator account first. Then go to System Settings > Users & Groups, and locate the account that needs a password reset. Select the user, and click Reset Password to create a new one.
If the user account is linked to an Apple Account: If a user forgets their Mac login password, you can help them reset it directly from the login screen if their account is linked to an Apple Account. After entering the wrong password three times, a prompt appears with the option to “Reset it using your Apple Account.” Clicking this allows the user to enter their Apple Account credentials and follow the onscreen instructions to create a new password. This method is a convenient and secure way to regain access without needing administrator intervention.
Using macOS Recovery (for administrator or FileVault users): If other password reset methods aren’t available, you can use macOS Recovery to reset a forgotten password. On a Mac, choose Apple menu > Shut Down. Start up Mac by pressing and holding the power button until “Loading startup options” appears. Select the Options icon, then click Continue to start in macOS Recovery.
Using FileVault recovery key: If FileVault is enabled on a Mac, the user can reset their login password using their FileVault recovery key. This key is generated when FileVault is first turned on and should be stored in a safe place. If a user forgets their password and other reset methods aren’t available, entering the recovery key at the login screen allows them to unlock the disk and set a new password. It’s important to remind users to securely store their recovery key, as losing it can result in permanent data loss. Storing the FileVault recovery key with a device management service is a common best practice in managed environments. This ensures recovery keys aren’t lost and enables secure support for password resets, while still keeping the data protected.
If a user forgot their password to log in to their Mac user account, or the password doesn’t work, you can help the user try these steps to reset their password.
Important: Be sure to turn on FileVault for disk encryption in Apple menu > System Settings > Privacy & Security. Set up Apple Account recovery options and keep the recovery key safe. Also use a password hint and the Passwords app to store passkeys and passwords.
Restart Mac
Every Mac has a power button. On laptop computers with Touch ID, press and hold the Touch ID button.
Restart Mac. If no option to restart appears, press and hold the Mac power button for up to 10 seconds, until it turns off. Then turn it on again.
Enter the password of the Mac user account
When Mac starts up and shows the login window, enter the password for the Mac user account. (This is the login password, not the password of the Apple Account.)
Use the correct uppercase or lowercase characters in the password. If the keyboard has Caps Lock turned on, the password field shows a Caps Lock symbol.
Check the Input menu in the corner of the login window to be sure that the keyboard is set for the correct language.
If the login password still doesn’t work, continue to the next steps.
Use the reset options in the login window
If a question mark appears next to the password field, have the user click it. The following password reset options might then appear:
A password hint: If the user added a hint when setting up the account, they have the option to see the hint.
A reset message: “Restart and show password reset options” or “Reset it using your Apple Account” or “Reset it using your recovery key.”
If a reset message doesn’t appear, check again after entering a password up to three times, then follow the steps below, depending on what appears: a reset message, a message that the account is locked, or no message.
If a reset message appears
If the login window shows a reset message, click the message to begin the reset process.
Follow the onscreen instructions, which vary based on the Mac setup.
If asked to select a volume to recover, select the startup disk, such as Macintosh HD.
If asked to select a user with a known password, click “Forgot all passwords?”
If asked to enter the FileVault recovery key, enter the string of letters and numbers the user received when they turned on FileVault and chose to use a recovery key.
If asked to deactivate this Mac, allow Mac to deactivate. This is temporary.
If asked to create a new keychain to store the user’s passwords, allow Mac to create a new keychain.
After the user provides the information requested, they’re asked to create a new password for the account. They can then restart Mac and log in with the new password.
If the user couldn’t use these steps to reset their password, skip to “Use the reset options in Recovery.”
Use an Apple Account to reset a local Mac user’s password
When the user’s local Mac account is created, there’s an option to allow them to reset their password using their Apple Account credentials. If this option is selected, then they can use their Apple Account to reset their forgotten local Mac account password.
On the login screen, select the user, then enter an incorrect password three times.
Click “Restart and show password reset options.”
Have the user sign in to their Apple Account, then click Next.
Enter the verification code sent to one of their other devices.
Have the user enter a new password, verify it, and click Next.
Click Restart, then verify the user can log in with their new local account password.
If a message that the account is locked appears
If the account becomes locked after repeated login attempts, wait until the stated time has elapsed, then restart Mac and try again. If that doesn’t help, skip to “Use the reset options in Recovery.”
If no message appears
If a reset message doesn’t appear in the login window after entering a password up to three times, restart Mac and try again. If that doesn’t help, continue to “Use the reset options in Recovery.”
Use the reset options in Recovery
If the user couldn’t reset their password using the reset options in the login window:
Start up from macOS Recovery.
While starting up from Recovery, they’re asked to select a user you know the password for. Click “Forgot all passwords?”
Follow the onscreen instructions, which vary based on the Mac setup.
After you provide the information requested, the user is asked to create a new password for their account. When done, click Exit to Recovery, restart Mac, and have the user log in with the new password.
If you couldn’t use these steps to reset the password, follow the next steps while still in Recovery. You’re in Recovery when options to restore from Time Machine, reinstall macOS, and more appear.
Additional options in Recovery
There are additional options when using Recovery, as shown in the screenshot below:
Before exiting to Recovery, if the user was asked to reset their password, they can now choose Apple menu > Restart, then log in with their new password. If they weren’t asked to reset their password, continue to the next step while still in Recovery.
In the Finder, choose Go > Utilities, then open the Terminal app.
In the Terminal window that opens, type
resetpassword, then press Return.
In the window that opens, choose a reset option, such as “I forgot my password” or “My password doesn’t work when logging in,” then click Next, and follow the onscreen instructions.
After the user provides the information requested, they’re asked to create a new password for their account. When done, click Exit to Recovery, restart Mac, and have the user log in with the new password.
If the user couldn’t use these steps to reset their password, continue to the next section.
If the user can’t reset their login password
If no other solution works, you can regain access to Mac by erasing it. This permanently removes each user account, its password, and its data from Mac.
Shut down Mac, then start up from macOS Recovery again. When the user is asked to select a user they know the password for, have them choose Recovery Assistant > Erase Mac from the menu bar at the top of the screen.
In the window that opens, click Erase Mac, then click Erase Mac to confirm.
After Mac is erased, it automatically restarts.
If Mac starts up to a question mark, turn it off, start up from macOS Recovery again, then reinstall macOS from Recovery.
If Mac starts up to an Activate Mac window, choose a Wi-Fi network and enter the Apple Account information (not the login information) when asked. After Mac activates, click Exit to Recovery, then reinstall macOS from Recovery.