- Platform
- Vouched Assure
- Password reset
Vouched Assure: password reset
Reset the password, not the trust.
Vouched Assure adds a quick identity check before a password reset, so the person setting the new password is the account owner. They take a live selfie, Vouched matches it to their enrolled identity, and they reset it themselves.
Why it matters
Password resets are a front door most attackers try first.
A reset hands over the account. It deserves at least the assurance of the original sign-up. Voice phishing aimed at help desks is now the second most common way attackers get in, at 11% of intrusions (Mandiant M-Trends 2026).
Help desk resets get socially engineered
A caller with a convincing story and a few personal details can talk an agent into a reset.
in damages Clorox alleges after attackers called its outsourced service desk, asked for credentials and were given them. Cognizant disputes the claims.
Source: Clorox v. Cognizant, filed July 2025estimated hit to Marks & Spencer’s operating profit (about $400 million) after attackers tricked a third party into resetting an employee’s password.
Source: Marks & Spencer, 2025Reset links prove control of an inbox
Not the identity of the person clicking. A compromised email means a compromised reset.
of organizations targeted in April 2025 by Tycoon 2FA, a phishing kit that takes over Microsoft 365 email accounts even with MFA on. Whoever holds the inbox receives the reset link.
Source: Proofpoint, 2025Every reset call has a cost
Resets routed through people take time from your team and keep the account owner waiting.
the estimated cost of one help desk password reset, with 20% to 50% of help desk calls being password resets.
Source: Forrester and Gartner estimatesHow it works
A selfie before the new password.
Reset is requested
From your sign-in page, the person says they’ve forgotten their password.
They confirm it’s them
A live selfie, guided so it works the first time, on the device they’re using.
Liveness and match
Vouched confirms a live person and matches them to the identity they enrolled with.
They set a new password
On a verified decision your flow continues to the reset; otherwise it routes for review.
What you get
Self-service, without the risk.
Liveness on every selfie
Photos, screens, recordings and deepfakes can’t stand in for the account owner.
Matched to enrollment
The person resetting is compared with the person who signed up.
Fewer help desk resets
Account owners reset their own passwords, so your team isn’t the reset path.
Any device
Works on phones and computers, with a branded handoff from desktop to phone.
Your brand
White-labeled in 15 built-in languages, inside your existing reset flow.
Your rules
Decide when a reset needs the check, and what happens on each decision.
Where it’s used
Built for the industries fraudsters target first.
Health systems
Patients reset portal passwords themselves, and the help desk stops being the reset path.
Health systems →Telehealth
Patients get back into their account in time for their visit.
Telehealth →Financial services
Customers reset credentials without creating an opening for account takeover.
Financial services →FAQ
Password reset, answered.
Straight answers about password reset with Vouched Assure.
Contact us with a questionWhat is secure self-service password reset?
It lets account owners reset their own password after proving who they are, instead of relying only on a reset link or a help desk call. With Vouched Assure, they take a live selfie that’s matched to their enrolled identity before setting a new password.
Why add identity verification to password reset?
A password reset hands over the account. Reset links only prove control of an inbox, and help desk resets can be socially engineered, so re-proving the person closes both gaps.
How does it work for the user?
They request a reset, take a quick live selfie on the device they’re using, and set a new password once Vouched returns a verified decision.
How does Vouched confirm it’s the account owner?
The selfie is checked for liveness, so a photo, screen, recording or deepfake can’t pass, and matched to the identity established at enrollment with Vouched Verify.
Does this replace reset emails?
It can sit alongside them. Many teams add the identity check to higher-risk resets, or to every reset, depending on their risk tolerance.
Can it reduce help desk password reset calls?
Yes. When account owners can reset securely themselves, the help desk no longer has to be the path for resets.
How much does help desk social engineering cost?
A legitimate help desk password reset costs about $70 by Forrester’s estimate, but a reset given to the wrong caller can cost far more. Clorox alleges a help desk social engineering attack caused $380 million in damages, and Marks & Spencer estimated a £300 million hit to operating profit in 2025 after attackers tricked a third party into resetting an employee’s password.
What if the selfie doesn’t match?
Vouched returns a review or rejected decision with the checks behind it, and your workflow decides the next step instead of completing the reset.
Can password reset be white-labeled?
Yes. Colors, fonts, copy and images match your product, in 15 built-in languages.
How do I get started?
Talk to sales to add identity-verified password reset to your flow. If you use Vouched Verify, reset builds on the identities you’ve established.