Changing a known password

If you know your current password, you can perform a password change via the My Security Info page in Microsoft's My Account page.  Click Change next to Password.  If you do not remember your password, proceed to the Password recovery sections.

Password recovery via Microsoft Self-Service Password Reset (SSPR)

Passwords can be reset via Microsoft's Self-Service Password Reset service. This service allows you to reset your password after verifying your identity through any previously set up authentication mechanisms such as email, phone, or other authenticator methods. The specific options available to you will vary based on what has been previously set up.

Getting Started

1. To get started, visit Entra SSPR here.
2. Enter your email alias (firstname.lastname@cwu.edu) or your username in the form of username@cwu.edu
3. Enter the information requested by the CAPTCHA program.  If you can’t easily view the information requested, click buttons to the right that allow you to refresh the images or have text read aloud to you.

Password Reset Methods

ℹ️ NOTE: CWU pre-determines the email method for anyone with a personal email address in MyCWU.

Email

Your identity can be verified by sending a verification code to your personal email address. Microsoft automatically pulls and uses the personal email address listed in MyCWU.

⚠️ NOTE: If your personal email address was not kept up to date in MyCWU, you may not be able to reset your password with this method. 

1. Click the Email button. Microsoft will send a verification code to the account you choose from the list. These will be masked for security purposes. 

2. Retrieve the verification code from your personal inbox.

   

3. Enter the code in the verification code box. Click Next.

Phone Call

Your identity can be verified with a phone number associated with your account.  If you haven’t recorded a phone number in MyCWU, Microsoft will not display this as an option for password reset. You will need to select a different verification method for password reset.

1. Enter the registered phone number that is being hinted at.
2. Answer the call from Microsoft and press the # sign to verify.

Microsoft Authenticator Notification

A notification can be sent to the Microsoft Authenticator app to verify your identity if your account was previously registered for multi-factor authentication. 

1. Click the "Send notification" button.
2. When the notification arrives, enter the numbers on the page. If these are obscured by the notification, press "I can't see the numbers" to dismiss the notification temporarily.

Authenticator Code

Time-based one-time passcodes from authenticator apps such as Microsoft Authenticator, Google Authenticator, etc., can be used for verification if previously registered for MFA. Since there are many compatible applications, documentation will not be covered here.

Finishing up

After having successfully verified your identity through one of the aforementioned methods, you will need to choose a new password and enter it on the final screen.

1. Enter your new password, which should conform to CWU's password requirements:
   1. Must be at least 14 characters long. CWU recommends the use of Passphrases. These are longer and more complex because they are a meaningful string of words.
   2. Must not include your name or any part of your name, birth date, username or any personal info like street addresses or phone numbers.
   3. It cannot be too close to any previous passwords you have used. The system also scans for passwords too easy to hack or that have been compromised.
   4. Must have at least three types of the following characters:
      • Uppercase (A-Z)
      • Lowercase (a-z)
      • Number (0-9)
      • Symbol (!, #, $, etc.)
2. Confirm the password by entering it again.
3. Click Finish. If the chosen password meets minimum criteria, it will finish up. If not, it will prompt you to try again.
4. Congratulations, your password has been reset!