Password Reset

A three-step flow that lets users securely reset a forgotten password: request a reset code, verify the code, and set a new password.

1 2 3

Step 1 of 3: Request reset code

Enter the email address associated with your account. We'll send a 6-digit verification code.

We sent a 6-digit code to . Enter it below to continue.

Choose a strong password that you haven't used before.

No password entered

Usage Notes

When to use: Use this pattern when a user has forgotten their password and needs a secure way to set a new one. This is typically linked from a sign-in page. The three-step flow (request, verify, reset) follows security best practices for identity verification.
Accessibility considerations: Each step transition is announced via an ARIA live region, including the step number and purpose. Focus is programmatically moved to the first interactive element when a new step appears. The password strength meter uses both color and a text label. The step indicator badges use aria-current="step" to mark the active step. The "back" link allows users to correct their email without losing context.
NYSDS components used: nys-textinput, nys-button, nys-alert, nys-icon
Customization points: Agencies can adjust the verification code length and expiry time, add phone-based verification as an alternative, customize the masked email display format, change password requirements, or redirect to a specific sign-in page on completion instead of showing the success alert.