---
title: "Reset a macOS User Password"
slug: "reset-a-macos-user-password"
updated: 2025-02-01T17:48:40Z
published: 2025-02-01T17:48:40Z
canonical: "support.kandji.io/reset-a-macos-user-password"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.kandji.io/kb/llms.txt
> Use this file to discover all available pages before exploring further.

# Reset a macOS User Password

### If FileVault 2 is Enabled

If FileVault is turned on and you have a FileVault recovery key, you can use that key to reset the password at the FileVault login window or in macOS recovery.

#### FileVault Login Window

If you are completing this process on an Apple Silicon Device running macOS 12.0.1 or later, you can press **Option-Shift-Return** at the FileVault login screen to reveal an entry field for the Recovery Key, then press Return. For any other devices, please follow the steps below.

1. At the FileVault login window, keep entering an incorrect password until you see the message that you can reset your password using your FileVault recovery key.
2. Click the arrow icon next to that message; the password field should now request a recovery key.
3. Enter the FileVault recovery key. (The letters in that key should be all uppercase, including the hyphens.)
4. Follow the instructions presented to reset the recovery password.
5. When logging back in, you may need to reset your keychain.

#### macOS Recovery

Boot your device into macOS Recovery.

- **Apple silicon:** Turn on your Mac and continue to press and hold the power button until you see the startup options window. Select the gear icon labeled Options, then click Continue.
- **Intel processor:** Turn on your Mac and immediately press and hold Command (⌘)-R until you see an Apple logo or other image.

If you're asked to select an admin user you know the password for, click **Forgot all passwords?** and proceed as described below.

1. Enter your FileVault recovery key.
2. When prompted to reset your password, click **Reset Password**.
3. Select a user to reset the password for.
4. After successfully authenticating, click **Exit**.
5. Choose Apple menu  > **Restart**. Password reset is now complete, so you don't need to take additional steps.

### Why can't Kandji just reset the password remotely?

FileVault works by encrypting the full startup disk of the Mac. When you are at the FileVault login window, the macOS startup disk is not yet unlocked. Therefore macOS is not yet running or connected to the internet to receive any MDM or agent communication.

To find the FileVault recovery key:

1. On the device record for the Mac, click the **Device Action Menu**.
2. From the dropdown, select **View FileVault2 recovery key**.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/zQ7t38w5W72za7TE00bjDorLY7uX5I_9JQ.png)

### If FileVault 2 is not Enabled

If FileVault is not turned on, you can use Terminal in the recovery partition to reset an account password.

1. Boot your device into macOS Recovery.
  - **Apple silicon:** Turn on your Mac and continue to press and hold the power button until you see the startup options window. Select the gear icon labeled Options, then click Continue.
  - **Intel processor:** Turn on your Mac and immediately press and hold Command (⌘)-R until you see an Apple logo or other image.
2. Once you see the macOS Utilities window, choose **Utilities** from the menu bar, then choose **Terminal**.
3. In Terminal, type *resetpassword* and press Return.
4. At the Reset Password window, click **Deactivate Mac**, then click **Deactivate** to confirm.
5. If you see an Activation Lock window, enter your Apple ID email and password, then click **Next**.

### If You Can't Log In After a Password Reset

If you can authenticate at the FileVault login window but are then asked to log in again at the standard login window, the local account may be locked due to incorrect password attempts. It can be unlocked via MDM.

#### Select the Unlock User Account Command

1. On the device record for the Mac, click the **Device Action Menu**.
2. From the dropdown, select **Unlock user account**. ![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/pdze3k8jvwtkut0esuwv0scaumrwcyf4ea.png)

#### Unlock User Account

1. Enter the short name of the account to unlock. (Check the **Details** page for a list of usernames)
2. Click **Unlock User** to send the command.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/JdjvXeGwuMV0tPfOwtFjksf7EcjoDVrllw.png)