How to Disable Account Recovery and Secondary Email
Nov 28, 2025
Administration
Okta Classic Engine
Okta Identity Engine
Overview
Applies To
-
Account recovery
Solution
-
How to disable Secondary Email
- Log in to the Okta Admin Console.
- Navigate to the Customizations menu.
- Select Other from the dropdown list.
- Locate Optional User Account Fields.
- Check the box next to Secondary Email to make it Disabled.
- Save the changes.
- How to disable Account Recovery
- Navigate to the Okta Admin Console.
- Navigate to Security > Authentication in Classic, or in OIE, select Security > Authenticators, select Actions > Edit next to Password.
- Select the appropriate Password Policy.
- In Classic, Select Edit. Disable all options next to Self-service recovery options.
- In OIE, scroll to the Rules at the bottom of the policy and select the Pencil icon next to the appropriate rule. Unselect all options next to Users can initiate recovery with.
