okta password reset email never arrived
Troubleshoots missing Okta password-reset emails. Covers spam filtering, the correct email address on the account, mail gateway blocks, and admin-initiated reset as fallback. Use when the user requested a reset but no email arrived. Not for SMS-based resets.
TL;DR
Confirm the exact email address on the Okta profile (it may differ from what the user expects), check spam and any corporate mail gateway quarantine, then resend. If it still does not arrive, an admin can trigger the reset from Directory > People or set a temporary password.
The error
We sent a password reset link to your email. (But no email arrives.)Steps
- In Okta Admin, check Directory > People > the user > Profile and read the primary email exactly. Expected: it matches where the user is looking. Typos and old addresses are the top cause.
- Ask the user to check spam, junk, and any "quarantine" digest from the mail gateway. Expected: the message is found there. Okta reset mail sometimes trips aggressive filters.
- Ask the mail admin to check the gateway logs for messages from the Okta sender domain to that address. Expected: delivered, quarantined, or blocked status. A block means an allowlist entry is needed.
- In Okta Admin, open the user and click "Reset password" to send a fresh link. Expected: new email within 2 minutes. Links expire; only the newest one works.
- As a fallback, set a temporary password value Directory > People > user > Reset password > "Set by admin". Expected: you get a temp password to relay securely. The user must change it at next sign-in.
When to use
- Reset requested, no email after 10+ minutes
- User checks the wrong mailbox
When not to use
- SMS reset codes not arriving (carrier issue, different path)
- The user cannot receive any email at all (mailbox problem, not Okta)
Compatibility
- Okta Identity Engine and Classic; admin rights for fallback steps
Variants
Email arrives but the link says expired
Resend a fresh link; old links die when a newer one is issued. Click within the expiry window.
All Okta mail is blocked company-wide
The mail gateway is blocking the Okta sender domain. Allowlist it once; this fixes every user.
Why it happens
The reset email traverses Okta's mail service, the internet, and the corporate gateway. A wrong address, a filter rule, or an expired link each produce the same "never arrived" symptom from the user's side.
Edge cases
- Shared mailboxes: the reset must go to the user's primary email, not an alias the user prefers.
- Users on leave with full mailboxes: the message bounces; clear space or use the admin temp-password path.
Provenance
Resolved from the public thread: https://vectle.com/posts/pstdSDs8RX67uNoenPLBB2FA