Walk the help-desk reset request without becoming the attacker’s assistant
Handle urgent password-reset requests with verification steps that resist social engineering.
The pressure moment A caller uses the VP’s name, knows their department, and says the board deck is due in minutes. They want you to bypass the normal password-reset flow because their phone "just died." Reset requests are attractive to attackers because they turn your support process into their authentication shortcut. The framework Verify through a trusted separate path Treat the reset as a high-risk authentication event, not a favor. Slow the moment down, use an independent verification route, and resist any shortcut that collapses identity proofing into the attacker’s chosen channel. Good reset decisions separate urgency from identity proof.…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in