Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs
13 votes

Salesforce password reset link expires immediately upon request

There's a Salesforce Knowledge article about this. It is caused, as other posters have said, by the email server protection software. Salesforce lists Mimecast, McAfee's 'Link Protect' feature, ...
Trish's user avatar
  • 131
10 votes

Salesforce password reset link expires immediately upon request

For those who are experiencing this issue on Outlook, if the URL as presented by Outlook begins with something like https://nam02.safelinks.protection.outlook.com/?url=<escaped_sfdc_url>, then ...
Dave Land's user avatar
  • 201
9 votes

Setting Password via APEX

The first parameter of that function call is the actual id of the user object. User Ids start with 005 and are 15 or 18 Characters long. for example: System.setPassword('005300000123aBc','A$tr0ngPW');...
curtisk's user avatar
  • 345
6 votes

Salesforce password reset link expires immediately upon request

Is your email going through a virus scanner that checks links within emails for malware etc. ? The password reset link you are being sent expires as soon as the link is visited. Having an admin send ...
Jason's user avatar
  • 852
5 votes
Accepted

Any Api to check if password meets policy requirements?

You can query the following via Metadata API: For the Organization's default security, retrieve Settings then look at SecuritySettings > passwordPolicies > complexity User's Profile's overridden ...
Scott Pelak's user avatar
  • 7,514
4 votes
Accepted

How Does salesforce stores passwords ? which algorithm / mechanism uses saelsforce to store password?

I suppose one of these https://trust.salesforce.com/en/compliance/ would cover your requirement at least from business perspective (i.e. without disclosing technical details)
Christian Szandor Knapp's user avatar
4 votes
Accepted

Salesforce password policy

Yes, you can set a variety of parameters for your org’s password policy. In Classic or Lightning Setup, search for “Password Policies” in the quick find. The page is pretty self-explanatory - set ...
Thomas Taylor's user avatar
4 votes

How do I prevent Apex-created users from having to change password on first login?

This is "Working as Designed" in terms of Salesforce functionality. Any time a new user is created or their password is reset, it's expected they'll be prompted to create a new password of their own ...
crmprogdev's user avatar
4 votes
Accepted

Protect a generated PDF

You can create a Username - Password step before allowing anyone to download your PDF. If you inform the user that he can download a PDF after inserting a Username and Password you can do something ...
Carlos Naranjo's user avatar
4 votes

Best way to save a API integration password

Yes, you should use NamedCredential to store authentication details. It is significantly more secure than Custom Settings. No one in the system can view a password once saved to this object; this ...
Adrian Larson's user avatar
  • 150k
4 votes
Accepted

Difference between "Reset Password" & "Generate New Password"

"Generate new password and notify user immediately" can also be used to force a new email address on the existing user profile without sending the User a confirmation email to their existing email on ...
Morgan Marchese's user avatar
4 votes

Is there any way to preserve Sandbox User passwords and tokens when Sandboxes are refreshed?

No, you can't preserve anything from the pre-refresh Sandbox. Refreshing a sandbox is semantically equivalent to deleting the old sandbox, then creating a new sandbox with the same name. The only ...
sfdcfox's user avatar
  • 494k
4 votes

Salesforce Password Expired

You're looking at the password policies for the org, but you most likely have Profile Password Policies defined which override it. To ensure that the appropriate level of password security is used ...
Kris Goncalves's user avatar
3 votes
Accepted

Remove password policies from profiles and have only one central password policy?

Yes you can do it via metadata. Thing your looking for is called ProfilePasswordPolicy <types> <members>*</members> <name>ProfilePasswordPolicy</name> </...
user1974566's user avatar
  • 2,315
3 votes

Salesforce password policy

As already mentioned by Thomas, you can specify various password expiration policies that apply to the entire org, but you can also exempt certain users from this policy by setting the Password Never ...
sfdcfox's user avatar
  • 494k
3 votes

How to restrict saving password for visualforce page?

After digging into this situation, the major browsers have all agreed to ignore the autocomplete attribute for input type="password" fields. It's considered a security enhancement. You might consider ...
sfdcfox's user avatar
  • 494k
3 votes

Salesforce password reset link expires immediately upon request

Recently I've faced the same issue. Every time I clicked on the password reset link in my email from Outlook office, I saw "Your reset link expired after 24 hours or has already been used.". Once ...
Oleh Berehovskyi's user avatar
3 votes
Accepted

How to hide username and password in log file when using CLI DataLoader?

As per documentation sfdc.debugMessages will log SOAP message debugging. As login is one of the message that need to be exchanged it also log that with all input(user/pass) and output (session id,...
AtulRajguru9's user avatar
  • 9,120
3 votes

Named Credentials using password authentication

Salesforce as a provider does not support Password Authentication. Hence Named Credential with Password authentication on the same org will not work and it will throw an error as below: [{"...
Ranjan Singh's user avatar
2 votes

Users required to reset their password even after System admin has set the password

This is by design in Salesforce - the System Administrator is not meant to know user passwords so even if you set the password for the user using the Developer Console it will still prompt them to ...
Dave Humm's user avatar
  • 5,111
2 votes
Accepted

System.UnexpectedException: INACTIVE_OWNER_OR_USER: owner or user is inactive

Its because you are trying to reset the password in before update context when the user is still Inactive. Try to reset the password in after update. That should work I guess. EDIT Have not tested ...
AslamK's user avatar
  • 2,079
2 votes

Setting Password via APEX

You can't hard code the UserId and password. You can try like this System.setPassword(u.id,passwordString);
Iqbal's user avatar
  • 112
2 votes

Setting Password via APEX

I hope you're not hard coding passwords, here's a few lines to generate a random alphanumeric char. Use as you will. final String selectionString = '...
Nonick's user avatar
  • 241
2 votes
Accepted

Retrieving the password of a user with php api

Pretty much all password based APIs will not return the value of the password that the user entered. Instead they store an encrypted version of the password such as a salted hash and when a login ...
Keith C's user avatar
  • 136k
2 votes

How Does salesforce stores passwords ? which algorithm / mechanism uses saelsforce to store password?

I don't believe any organization that follows data security standards is storing or should be storing user passwords in any form - plain text or encrypted. Password validation can be done by using ...
o-lexi's user avatar
  • 3,094
2 votes
Accepted

Check the username and the password of a community user

The response is the APEX method Site.changePassword(). https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_classes_sites.htm
Oupat's user avatar
  • 733
2 votes

SF text field Password masking

What you want is to create Encrypted field shown as below The options you shown on your screenshot is only for documentation purposes for your organization to determine what is considered "...
compski's user avatar
  • 1,352
2 votes
Accepted

How to check for the current user's password?

It is possible to check the user's password with Apex through the UserManagement class: Auth.VerificationResult res = UserManagement.verifyVerificationMethod( null, 'the actual password', ...
Renato Oliveira's user avatar
1 vote

Remove password policies from profiles and have only one central password policy?

Faced with the same problem, I tried the Salesforce CLI command sfdx force:source:delete -m ProfilePasswordPolicy but this returned error No ProfilePasswordPolicy named: * found Profile password ...
Thomas Minney's user avatar
1 vote
Accepted

Can a Managed Package with a password be imported through SFDX?

For now, the only ways to install the package require the key. This includes the method in my old answer, or the newer feature force:package:install that lets you specify the installation key from a ...
sfdcfox's user avatar
  • 494k

Only top scored, non community-wiki answers of a minimum length are eligible