# What is the recommended process for a password reset? **URL:** \ **Category:** Support\ **Created:** [January 5, 2024, 3:59am UTC](https://aleph.discourse.group/t/what-is-the-recommended-process-for-a-password-reset/51 "2024-01-05T03:59:04Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![dev23](https://avatars.discourse-cdn.com/v4/letter/d/67e7ee/32.png) [@dev23](https://aleph.discourse.group/u/dev23)\ **Post date:** [January 5, 2024, 3:59am UTC](https://aleph.discourse.group/t/what-is-the-recommended-process-for-a-password-reset/51/1 "2024-01-05T03:59:04Z")
A user has forgotten their password. There doesn’t seem to be an obvious way to issue a password reset email to them. In the aleph commandline client I can only see createuser deleterole So I’m guessing that I have to reset the password directly in postgresql. I can see existing passwords use pbkdf2:sha256:. What is the magic incantation I need? So far I’ve got UPDATE role SET password\_digest = ??? WHERE id=5 Or have I missed something in the documentation … Would rather not delete the user and recreate. ---
**Author:** ![steve.haffenden](https://yyz2.discourse-cdn.com/free1/user_avatar/aleph.discourse.group/steve.haffenden/32/7_2.png) [@steve.haffenden](https://aleph.discourse.group/u/steve.haffenden)\ **Post date:** [January 8, 2024, 9:55am UTC](https://aleph.discourse.group/t/what-is-the-recommended-process-for-a-password-reset/51/2 "2024-01-08T09:55:54Z")
Recommendations would depend on whether you are using an external SSO solution like Keycloak or are relying on the user management that is built into Aleph. I’m going to assume that you are using Aleph, I would try using the _createuser_ prompt to update the users password. As long as you use _createuser_ with an existing users email address details will be updated rather than recreated. Information on the _createuser_ cli command can be found in our developer documentation here: [Installing Aleph – Aleph](https://docs.aleph.occrp.org/developers/installation/#users) Just make sure that you’re in an appropriate shell. Start by verifying that everything works as expected by creating a new user and testing the change password process. Thus. Create a new user: ```auto aleph createuser --name="New User" --password=password example@test.com ``` Once you’ve done this login using these details, verify that the password works, and then update the password with the same command: ```auto aleph createuser --name="New User" --password=updated_password example@test.com ``` Now login with the same user again using the updated password. If this works then you can be confident that you can update you users password. I’ve tested this locally with the latest version of Aleph (3.15) and it all works as expected.