# Turn Off Forgot Password

Learn how to turn off the forgot password workflow for a FusionAuth tenant and hide the forgot password link on the hosted login pages.

> For the index of this section of the site, see [llms.txt](https://fusionauth.io/docs/llms.txt)

Turn off the [forgot password workflow](https://fusionauth.io/docs/users/account-recovery.md) when users must recover accounts another way, for example through your support team or a corporate identity provider. FusionAuth turns the workflow off for each [Tenant](https://fusionauth.io/docs/concepts/types/tenants.md), not for each [Application](https://fusionauth.io/docs/concepts/types/applications.md).

## Remove the Forgot Password Templates

The Tenant's forgot password templates turn the workflow on. To turn off the workflow:

1.  Navigate to Tenants and click edit next to your Tenant.
2.  Select the Identities tab.
3.  In the **Template settings** section, set **Forgot password** in the email column to `Feature disabled. No template selected.`
4.  Set **Forgot password** in the phone column to the same value.
5.  Click save.

To turn off only one delivery method, clear only that template. For example, clear the phone template to stop recovery by text message and keep recovery by email.

An Application's own **Forgot password** templates don't turn the workflow back on. FusionAuth checks only the Tenant templates.

## Hide the Forgot Password Link

The login page shows the **Forgot your password?** link even after you remove the templates. A user who clicks the link sees `Forgot password handling is not enabled. Please contact your system administrator for assistance.` To hide the link, edit an [advanced theme](https://fusionauth.io/docs/theme/advanced-themes.md):

1.  Navigate to Customizations -> Themes and click edit next to the theme your Application uses.
    
2.  Select the OAuth authorize template.
    
3.  Delete the line that links to `/password/forgot`:
    
    ```plaintext
    [@helpers.link url="${request.contextPath}/password/forgot"]${theme.message("forgot-your-password")}[/@helpers.link]
    ```
    
4.  Click save.
    

The [Simple Theme Editor](https://fusionauth.io/docs/theme/simple-theme-editor.md) can't remove the link. To change the message instead, set the `[ForgotPasswordDisabled]` key on the theme's Messages tab. See [Theme Localization](https://fusionauth.io/docs/theme/localization.md#messages).

## What Still Works

With the templates removed, the [Forgot Password API](https://fusionauth.io/docs/apis/users/forgot-password.md) returns `403` to any request that asks FusionAuth to send a message. The Admin UI also hides the **Send password reset** action for the Tenant's users.

A request with an API key and **`sendForgotPasswordMessage`** set to `false` still creates a change password Id. Limit which API keys can call `/api/user/forgot-password`. See [API Key Authentication](https://fusionauth.io/docs/apis/authentication.md#api-key-authentication).

Users can still change a known password in [self-service account management](https://fusionauth.io/docs/users/account-management/updating-user-data.md). An administrator can still [require a password change](https://fusionauth.io/docs/users/user-support-guide.md#require-a-password-change) at the next login.

## Confirm the Change

To confirm that the workflow is off:

1.  Open the login page for your Application in a private browser window.
2.  Confirm that the **Forgot your password?** link doesn't appear.
3.  Open `/password/forgot?client_id={yourClientId}` and submit the email address of a test user.
4.  Confirm that the page shows the `Forgot password handling is not enabled.` message.

Related

[Users Let Users Reset Passwords on the Hosted Login Pages Learn how to let users reset a forgotten password by email or text message on the FusionAuth hosted login pages. account recoveryforgot passwordpassword reset](https://fusionauth.io/docs/users/account-recovery/hosted-pages.md)

[Users Account Recovery Learn how FusionAuth lets users reset a forgotten password by email or text message, and how recovery interacts with MFA, sessions, and account lockout. account recoveryforgot passwordpassword reset](https://fusionauth.io/docs/users/account-recovery.md)

[Users Build a Password Reset Flow With the API Learn how to build your own forgot password pages with the Forgot Password and Change Password APIs, including users with MFA. account recoveryforgot passwordpassword reset](https://fusionauth.io/docs/users/account-recovery/api.md)

[APIs Change a User's Password API API documentation for the FusionAuth Change a User's Password API. password resetforgot password](https://fusionauth.io/docs/apis/users/change-password.md)
---

## Other pages in Account Recovery

> For the full index of this section, see [Users](https://fusionauth.io/docs/llms-users.txt).

- [Build a Password Reset Flow With the API](https://fusionauth.io/docs/users/account-recovery/api.md): Learn how to build your own forgot password pages with the Forgot Password and Change Password APIs, including users with MFA.
- [Let Users Reset Passwords on the Hosted Login Pages](https://fusionauth.io/docs/users/account-recovery/hosted-pages.md): Learn how to let users reset a forgotten password by email or text message on the FusionAuth hosted login pages.
- [Account Recovery](https://fusionauth.io/docs/users/account-recovery.md): Learn how FusionAuth lets users reset a forgotten password by email or text message, and how recovery interacts with MFA, sessions, and account lockout.