Considerations<\/strong><\/p>\n\n\n\n
- \n
- If you have MFA enabled in your organization, your users will need to verify their identity using MFA before they can change their password. They can use Push MFA though the JumpCloud Protect app<\/a>, TOTP MFA through either JumpCloud Protect or another authenticator, or use Duo<\/a>. However, Duo is only available if it\u2019s the only form of MFA available. <\/li>\n\n\n\n
- Passwords changed locally using Ctrl+Alt+Del<\/strong> will update the Windows Credential Manager and the Data Protection API.<\/li>\n\n\n\n
- User accounts managed by Active Directory using AD integration won’t be able to use the Windows App to reset their password.<\/li>\n\n\n\n
- A known issue exists for Windows 8, 8.1, and Server 2012: if a user is on a slow internet connection, they can click\u00a0Cancel\u00a0<\/strong>before they see the password change confirmation screen. In this case, the password change operation isn’t stopped, but the user isn’t notified of success or failure. This is a limitation of the previously mentioned Windows versions and can’t be controlled by JumpCloud.<\/li>\n<\/ul>\n\n\n\n
Password Update Methods<\/h1>\n\n\n\n
- \n
- Open the JumpCloud Windows App<\/strong> running in the system tray<\/strong> and click Reset password<\/strong>.\n
- \n
- For more information, see\u00a0Users: Change Your Password in the Windows App<\/a>.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Press\u00a0Ctrl+Alt+Del<\/strong>\u00a0and click\u00a0Change Password<\/strong>.<\/li>\n\n\n\n
- Open the\u00a0JumpCloud\u00a0User Portal<\/strong>\u00a0login page and select\u00a0Reset User Password.\u00a0<\/strong>\n
- \n
- For more information, see\u00a0Change Your User Portal Password<\/a>.\u00a0<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Open the JumpCloud<\/strong>\u00a0User Portal<\/strong> and navigate to the Security Settings.<\/strong><\/li>\n\n\n\n
- Update password using\u00a0a link included in a password expiration email reminder.\n
- \n
- If you enable the\u00a0Password expires after N days<\/a>\u00a0option, users receive one email a day for 7 days leading up to their password’s expiration that asks them to reset their password.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
Changing your Password in the JumpCloud Windows Tray App<\/h2>\n\n\n\n
The JumpCloud Windows App is the preferred method for user password changes on Windows devices. Below is an overview of the user process. For specific user instructions, see Users: Change Your Password in the Windows App<\/a>. Note that when you change your password, any active sessions (User Portal, SSO applications, etc.) will be terminated.<\/p>\n\n\n\n
The user flow:<\/strong><\/p>\n\n\n\n
- \n
- In the system tray, open the JumpCloud Windows App.<\/li>\n\n\n\n
- To change the password, type in your previous password, followed by the new password twice for confirmation.<\/li>\n\n\n\n
- If MFA is enabled for your JumpCloud account, you need to authenticate your account. Depending on the types of MFA enabled by your organization, you’ll see one of two options:<\/li>\n<\/ol>\n\n\n\n
- \n
- Push<\/strong>: Use the JumpCloud Protect app to verify your identity with a push notification. See JumpCloud Protect for End Users<\/a>.<\/li>\n<\/ul>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>Note:<\/strong> \nA cancel button displays on the logon screen while you are verifying your identity using Push MFA. Clicking this button has no effect on the push notification. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- TOTP<\/strong>: Enter a six-digit code from an authenticator app such as JumpCloud Protect or Google Authenticator.<\/li>\n<\/ul>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
The Duo app is also supported, but is only used when no other form of MFA has been enabled. If you are using duo as your only form of MFA verification, you will receive a notification on your device to verify your identity. See Use Duo Security with JumpCloud MFA<\/a>. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- The new password is instantly synchronized with any other password stores. <\/li>\n\n\n\n
- The Windows device agent then contacts JumpCloud’s credential management services through a secure Transport Layer Security (TLS) connection.<\/li>\n\n\n\n
- The device agent synchronizes changes from the device to JumpCloud and all the resources JumpCloud manages. If you’re using AD Sync, the password changes sync to Active Directory\u00ae as well.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
- \n
- User accounts managed by Active Directory using AD integration won’t be able to use the Windows App to reset their password.<\/li>\n\n\n\n
- Leverage a toolkit of emails and help articles<\/a> to communicate with your end users about the Windows Password Sync feature, how to use it, and other resources you may need to provide a user-friendly experience when going live with the Windows App.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Changing your password using Ctrl+Alt+Del<\/h2>\n\n\n\n
To change your password using Ctrl+Alt+Del:<\/strong><\/p>\n\n\n\n
- \n
- Press Ctrl+Alt+Del<\/strong>, then select Change Password<\/strong>.<\/li>\n\n\n\n
- Enter your Old Password<\/strong>.<\/li>\n\n\n\n
- Enter your New Password<\/strong>.<\/li>\n\n\n\n
- Enter your new password again in Confirm Password<\/strong>.<\/li>\n\n\n\n
- If MFA is enabled for your JumpCloud account, you need to authenticate your account. Depending on the types of MFA enabled by your organization, you’ll see one of two options:<\/li>\n<\/ol>\n\n\n\n
- \n
- Push<\/strong>: Use the JumpCloud Protect<\/a> app to verify your identity with a push notification.<\/li>\n<\/ul>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
A cancel button displays on the logon screen while you are verifying your identity using Push MFA. Clicking this button has no effect on the push notification. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- Push<\/strong>: Use the JumpCloud Protect<\/a> app to verify your identity with a push notification.<\/li>\n<\/ul>\n\n\n\n
- TOTP<\/strong>: Enter a six-digit code from an authenticator app such as JumpCloud Protect or Google Authenticator.<\/li>\n<\/ul>\n\n\n\n
- Push<\/strong>: Use the JumpCloud Protect app to verify your identity with a push notification. See JumpCloud Protect for End Users<\/a>.<\/li>\n<\/ul>\n\n\n\n
- If you enable the\u00a0Password expires after N days<\/a>\u00a0option, users receive one email a day for 7 days leading up to their password’s expiration that asks them to reset their password.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
- Open the JumpCloud Windows App<\/strong> running in the system tray<\/strong> and click Reset password<\/strong>.\n