If the user forgets their Salesforce login credential, the user should be able to click Forgot Password? on the login screen to receive a new password by email. In many cases, the administrator does not need to be involved at all.
Once you click the forgotten link and enter the username, Salesforce will send an email associated with the username with a security question. The user must answer a predefined security question before she can reset her password and log in. If the user has not defined a security question or does not answer the security question correctly, the password is not reset.
Once the user answers the security correctly, the user will receive an email with a link in the email to reset the password, this link will expire after 24 hours and will be activated only once, which means that the user clicks on the link, then ignore it and then the user clicks the link again, it's expired.
There is a maximum of five requests to change a password in a twenty-four hour period, while the administrator can reset a password as often as needed.
Depends on your organization's password policy or profile password policy, if the maximum number of invalid login attempts is not set to Unlimited, the user account will be locked after multiple invalid password trials , the number of attempts allowed depends on the maximum number of invalid login attempts before locked setting. Resetting the password of locked users also automatically unlocks their accounts.
smith james
