# Force user on first Login to reset their password

**URL:** <https://community.auth0.com/t/force-user-on-first-login-to-reset-their-password/92088>\
**Category:** Get Help\
**Tags:** password, hooks, login\
**Created:** [October 10, 2022, 3:18pm UTC](https://community.auth0.com/t/force-user-on-first-login-to-reset-their-password/92088 "2022-10-10T15:18:17Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![7Lee](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@7Lee](https://community.auth0.com/u/7Lee)\
**Post date:** [October 10, 2022, 3:18pm UTC](https://community.auth0.com/t/force-user-on-first-login-to-reset-their-password/92088/1 "2022-10-10T15:18:17Z")

</div>

Hi Auth0 community,

I’m gonna quickly introduce myself, I am a French NEWBIE in Auth0 and its world and I am actually a studend in UI / UIX Design.

The idea is simple ; I have an **existing** Database and I want my users to :

- Login through their email and as soon as they login, they HAVE TO change their password.

I found this topic interesting :

[https://community.auth0.com/t/sending-password-change-email-instead-of-verification-email-for-a-new-user/55713/6](https://community.auth0.com/t/sending-password-change-email-instead-of-verification-email-for-a-new-user/55713/6)

I followed it but nothing work for me.

Any other clue ?

Thanks for reading me

Have a nice day ! 😃

---

<div class="post-metadata">

**Author:** ![SaqibHussain](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/saqibhussain/32/42924_2.png) [@SaqibHussain](https://community.auth0.com/u/SaqibHussain)\
**Post date:** [October 11, 2022, 10:28pm UTC](https://community.auth0.com/t/force-user-on-first-login-to-reset-their-password/92088/2 "2022-10-11T22:28:54Z")

</div>

Hi @7Lee

Welcome to the Auth0 Community. It’s great to have you onboard.

We have a document that demonstrates how you might achieve this via rules here [https://auth0.com/docs/customize/rules/redirect-users#force-password-change-example](https://auth0.com/docs/customize/rules/redirect-users#force-password-change-example)

Please give this a go and let us know how you get on.

Warm regards.

---

<div class="post-metadata">

**Author:** ![john.gateley](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/john.gateley/32/10879_2.png) [@john.gateley](https://community.auth0.com/u/john.gateley)\
**Post date:** [October 12, 2022, 1:24pm UTC](https://community.auth0.com/t/force-user-on-first-login-to-reset-their-password/92088/3 "2022-10-12T13:24:11Z")

</div>

Hi @7Lee

In addition to what @SaqibHussain said, I would add “don’t do this”. Forcing users to reset their password this way is an anti pattern. It probably means you sent them a clear text password via email, which is an insecure thing to do.

Instead, you should send them a password reset link, so they set their own password.

John

---

<div class="post-metadata">

**Author:** ![7Lee](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@7Lee](https://community.auth0.com/u/7Lee)\
**Post date:** [October 13, 2022, 6:38am UTC](https://community.auth0.com/t/force-user-on-first-login-to-reset-their-password/92088/5 "2022-10-13T06:38:10Z")

</div>

Hi guys

I followed the steps you sent me and It worked ! Thanks a lot for your help and your time.

Also, thanks a lot @john.gateley for your advice, I took it in consideration and it will be safer to use a password reset link instead of a clear text password.

Have a great days guys

Sincerely

7Lee

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [October 27, 2022, 6:38am UTC](https://community.auth0.com/t/force-user-on-first-login-to-reset-their-password/92088/6 "2022-10-27T06:38:53Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
