I need a way to reduce password reset tickets

To reduce password reset tickets, focus on making authentication easier to recover and harder to forget. The most effective options are usually:

1. Enable self-service password reset (SSPR)

   • Let users reset passwords themselves without IT help.
   • Best when combined with identity verification methods like email, SMS, authenticator app, or security questions.

2. Adopt passwordless or MFA-based sign-in

   • Use authenticator apps, biometrics, security keys, or passkeys.
   • This reduces reliance on remembering passwords altogether.

3. Extend session duration where appropriate

   • Fewer logins means fewer forgotten passwords.
   • Be careful not to weaken security for sensitive systems.

4. Improve password policy usability

   • Avoid overly complex rules that force frequent resets.
   • Allow long passphrases instead of frequent changes.
   • Don’t require periodic password expiration unless necessary.

5. Add clear login and reset guidance

   • Simple instructions on the login page can reduce user errors that look like password issues.
   • Include “Forgot password?” prominently.

6. Reduce account lockouts

   • Tune lockout thresholds so users aren’t locked out after a small number of mistakes.
   • Consider progressive delays instead of hard lockouts.

7. Use a single sign-on (SSO) solution

   • One login across multiple apps means fewer passwords to remember and fewer resets.

8. Train users on password managers

   • Password managers reduce forgotten passwords and encourage stronger, unique passwords.

If you want the fastest win, I’d recommend this order:

• 1) Self-service reset
• 2) MFA/passkeys
• 3) SSO
• 4) Better lockout policy

If you tell me what environment you’re in (Microsoft 365, Google Workspace, Okta, on-prem AD, etc.), I can suggest the best specific setup.