Self-Service Password Reset/Account Unlock: What if the User’s Email is Not in Okta
Sep 5, 2025
Okta Identity Engine
Administration
Overview
This article describes how Okta handles self-service password reset or account unlock emails when the user's email address does not exist in Okta.
Applies To
- Self-Service Password Reset
- Self-Service Password Unlock
Solution
When performing a self-service password reset or self-service Account Unlock on the Okta login page, a user is given the option to enter an email address or login username. When a login username is used, Okta will send a password reset/unlock email to the associated email address. If a user enters a false email address, Okta will not take any action. No emails are sent by Okta. For security reasons, Okta will not display any errors in the user interface.
NOTE: Both the primary and secondary email addresses of the user can be used when entering an email address during the recovery flow.
