Skip to main content

Why am I being asked to reset my password?

The administrator has enabled Strong Password RequirementsExposed Password Detection, or both. Depending on your permission level you will be asked to reset your password when you first log in or within Box. Select and follow the applicable steps:

Resetting your Box password using Account Settings

To reset the password for your Box account, follow this process:
  1. Visit https://app.box.com/reset and enter the email address associated with your Box account.
  2. Check your email, you will receive an email with a link to reset your password.
    • Password reset links sent via email expire 3 hours after they are sent. If you need a new link after your current one has expired, visit https://app.box.com/reset to have another link emailed to you.
    • If you do not receive an email from Box for this password reset, check to see if your Box account is associated with that specific email address or another email address.
    • Also, check your spam folder in your email client for this email.

Resetting your Box password using the notification banner

When you log in to Box, you may receive a notification asking you to update your password. This can happen if your administrator requires strong passwords, or if your password has been found in a third-party database of leaked passwords.
  1. Click Update in the notification banner to open the Change password modal.
  2. Type in your Current password in the field provided.
  3. Type in your New password in the field provided following the Password strength guidance. The list of password criteria will indicate what your password is missing with an “X.”
  4. With all password requirements met, retype your password in the Confirm new password field.
  5. Click Save.
You must meet all criteria to successfully save and update your password. After you click Save, you will see the notification, “Your password has been changed successfully.”

If you see an exposed password notification

Box notifies you if your password has been found in a third-party database of leaked passwords:
  • A notification banner displays on the All Files page with an Action needed message advising you to change your password.
  • An informational banner displays in Account Settings > Authentication.
You are not blocked from using Box, but Box strongly recommends that you change your password as soon as possible to protect your account.
Last modified on August 19, 2026