Follow the steps below to reset your Okta password. To complete the reset, you will need access to your ACV email or the secondary email you set up with your Okta account. You will also need to complete the Multi-factor Authentication (MFA) step.
| 1 | Click "Forgot password?" On the Okta sign-in page, enter your username, then click Forgot password? under the password box. | |
| 2 | Send the verification email Click Send me an email. Okta sends a verification email to your ACV address and to your personal secondary email. | |
| 3 | Open the email Click the link in the email. On a different device, choose Enter a verification code instead, type the code, and click Verify. | |
| 4 | Confirm with your MFA Choose a method you already use to sign in: an Okta Verify code, an Okta Verify push, or a security key or biometric (for example Touch ID or Windows Hello). | |
| 5 | Set your new password Approve the push or enter your code, then enter and confirm your new password. You are signed in automatically. |
FAQ
Does this change how I sign in every day?
No. Only the password reset and account unlock process changes.
Do I need to set anything up?
No. The reset uses your existing email addresses and the MFA you already use to sign in.
Why is the reset email also going to my personal email?
So you can still reset your password if you cannot get into your ACV mailbox. The email alone is not enough to reset your password; you also need your MFA.
Why are text message and phone call resets going away?
Text messages and phone calls are among the easiest methods for attackers to abuse. They can be intercepted or redirected through SIM swapping, where someone takes over your phone number. Okta Verify, security keys, and biometrics are much harder to phish.
Why are security questions going away?
Answers are often easy to guess or find online, which makes them a weak way to prove who you are.
I got a reset email or push I did not request.
Do not click the link or approve the push. Email security@acvauctions.com.
I did not get the reset email.
Check spam or junk in both inboxes. The code expires after a few minutes, so request a new one if needed. Still stuck? Contact helpdesk@acvauctions.com.
I lost my phone and Okta Verify is my only method.
Contact the Help Desk. They will verify your identity before helping you regain access.