New Password Reset System Helps Keep Users—and the Exchange—Safe

Chad Lucas
Executive Vice President and
Chief Information Officer

Exchange IT is always working to keep the organization safe and secure from cyberthreats. Now, we’re partnering with a new IT service management company called Okta for a more secure password-reset process.

You may have seen recent emails from IT prompting you to register in Okta. This is a short, one-time registration that will ensure each user is in the new system. After registration, the password-reset process will look much the same as it does now.

The benefit of the new system is upgraded security, ensuring that users’ information—and the Exchange’s—stays safe. The biggest difference users will see in the new process is two-factor authentication. Going forward, when users reset their password, they will receive a notification on their phone, via DUO, asking them to confirm. Two-factor authentication is a cybersecurity best practice, ensuring that it’s really you resetting your password and not someone who has gotten ahold of your information.

Besides being more secure, the new system is more convenient: users can now reset their password from their personal devices—they no longer have to be on an Exchange device or connected to Exchange servers.

Anyone with an Exchange account—including all associates, local nationals and contractors—must register with Okta to be able to reset their passwords in the future. The registration can be completed by going to https://passwordreset.aafes.com and following the step-by-step prompts.

Associates can find resources on the Identity Access Management Assistance page, which has links to frequently asked questions, detailed instructions with screenshots, help on enrolling in DUO and more.

Thank you to all associates for their assistance in completing this transition that will strengthen the Exchange against cyberthreats. Stay vigilant!