# Let Users Reset Passwords on the Hosted Login Pages

Learn how to let users reset a forgotten password by email or text message on the FusionAuth hosted login pages.

> For the index of this section of the site, see [llms.txt](https://fusionauth.io/docs/llms.txt)

The [hosted login pages](https://fusionauth.io/docs/concepts/integration-points.md#hosted-login-pages) show a **Forgot your password?** link on the login page. When a user clicks the link, FusionAuth runs the [forgot password workflow](https://fusionauth.io/docs/users/account-recovery.md) for you. To make the link work, give the [Tenant](https://fusionauth.io/docs/concepts/types/tenants.md) a forgot password template for each way your users log in.

## Prerequisites

*   For recovery by email, configure an email server on the Tenant. See [Configure Email](https://fusionauth.io/docs/email/configure-email.md).
*   For recovery by text message, create an SMS [messenger](https://fusionauth.io/docs/messengers.md). Recovery by text message requires FusionAuth `1.59.0` or later.
*   An [Application](https://fusionauth.io/docs/concepts/types/applications.md) that logs users in through the hosted login pages.

## Choose the Forgot Password Templates

FusionAuth ships with a `[FusionAuth Default] Forgot Password` email template. The setup wizard assigns that template to the default Tenant. FusionAuth doesn't ship a forgot password message template, so create one for recovery by text message. See [Message Templates](https://fusionauth.io/docs/messengers/message-templates.md).

To assign the templates:

1.  Navigate to Tenants and click edit next to your Tenant.
2.  Select the Identities tab.
3.  For recovery by text message, set **Messenger** in the **Messaging settings** section to your SMS messenger.
4.  In the **Template settings** section, set **Forgot password** in the email column to your email template.
5.  For recovery by text message, set **Forgot password** in the phone column to your message template.
6.  Click save.

![The Template settings section of the Tenant Identities tab, with the email and phone Forgot password templates highlighted.](https://fusionauth.io/img/docs/screenshots/account-recovery-tenant-templates.png)

Set a template for every identity type your users log in with. If a user enters a phone number and the Tenant has no forgot password message template, FusionAuth shows an error instead of the confirmation page. That error also tells the visitor that an account with the phone number exists.

To brand the message for one Application, set the Application's own **Forgot password** templates on the Application's Identities tab. An Application template replaces the Tenant template for users who start the workflow from that Application. The Tenant template must still be set. See [Application-Specific Email Templates](https://fusionauth.io/docs/email/configuring-application-specific-email-templates.md).

## Test the Workflow

To confirm that the workflow works:

1.  Open the login page for your Application in a private browser window.
2.  Click **Forgot your password?**.
3.  Enter the email address, phone number, or username of a test user, and submit the form.
4.  Open the email or text message, then open the link in the message.
5.  Enter a new password and submit the form.

![The hosted Forgot password page, with a field for the user's login Id.](https://fusionauth.io/img/docs/screenshots/account-recovery-forgot-password-page.png)

When you start from the login page, FusionAuth logs the test user in after the change and redirects the user to your Application. If the test user has MFA enabled, FusionAuth asks for the second factor before the new password form.

To confirm the change, log out and log in with the new password.

## Customize the Pages

To change the text or layout of the forgot password pages, edit the `passwordForgot`, `passwordSent`, `passwordChange`, and `passwordComplete` templates in your [theme](https://fusionauth.io/docs/theme/advanced-themes.md#templates). To change the messages, edit the email or message template. For the variables each template can use, see the [email template reference](https://fusionauth.io/docs/email/template-reference.md#forgot-password) and the [message template reference](https://fusionauth.io/docs/messengers/template-reference.md#forgot-password).

To link to the forgot password page from your own application, use `/password/forgot?client_id={yourClientId}`. Without the client Id, FusionAuth uses the Tenant theme and doesn't log the user in after the change.

## Troubleshooting

### The Page Says Forgot Password Handling Is Not Enabled

The Tenant has no forgot password template for the identity the user entered. Assign the template as shown in [Choose the Forgot Password Templates](#choose-the-forgot-password-templates).

### The User Never Receives the Message

The confirmation page appears even when FusionAuth finds no matching user, so check the login Id first. Then check the email server or the messenger. See [Troubleshooting Email](https://fusionauth.io/docs/deploy/troubleshoot/troubleshooting.md#troubleshooting-email), or turn on debugging for the [messenger](https://fusionauth.io/docs/messengers.md).

### The Link Returns the User to the Forgot Password Page

The change password Id expired, or a newer request replaced the Id. Start the workflow again. To give users more time, raise **Change password** in the Tenant's [external identifier durations](https://fusionauth.io/docs/concepts/types/tenants.md#external-identifier-durations-form-fields).

Related

[Users Account Recovery Learn how FusionAuth lets users reset a forgotten password by email or text message, and how recovery interacts with MFA, sessions, and account lockout. account recoveryforgot passwordpassword reset](https://fusionauth.io/docs/users/account-recovery.md)

[Users Turn Off Forgot Password Learn how to turn off the forgot password workflow for a FusionAuth tenant and hide the forgot password link on the hosted login pages. account recoveryforgot passwordpassword reset](https://fusionauth.io/docs/users/account-recovery/turn-off-forgot-password.md)

[Users Build a Password Reset Flow With the API Learn how to build your own forgot password pages with the Forgot Password and Change Password APIs, including users with MFA. account recoveryforgot passwordpassword reset](https://fusionauth.io/docs/users/account-recovery/api.md)

[APIs Change a User's Password API API documentation for the FusionAuth Change a User's Password API. password resetforgot password](https://fusionauth.io/docs/apis/users/change-password.md)
---

## Other pages in Account Recovery

> For the full index of this section, see [Users](https://fusionauth.io/docs/llms-users.txt).

- [Build a Password Reset Flow With the API](https://fusionauth.io/docs/users/account-recovery/api.md): Learn how to build your own forgot password pages with the Forgot Password and Change Password APIs, including users with MFA.
- [Account Recovery](https://fusionauth.io/docs/users/account-recovery.md): Learn how FusionAuth lets users reset a forgotten password by email or text message, and how recovery interacts with MFA, sessions, and account lockout.
- [Turn Off Forgot Password](https://fusionauth.io/docs/users/account-recovery/turn-off-forgot-password.md): Learn how to turn off the forgot password workflow for a FusionAuth tenant and hide the forgot password link on the hosted login pages.