# User remedies

> Block sign-in, reset a password, or let Octiga lock an account automatically after a serious risk event.

These remedies protect an account at risk: block its sign-in, reset its password, or let Octiga lock it automatically after a serious risk event. Each works the same way wherever you meet it: from an account risk finding, an alert, or a mailbox in [Mail flow](https://docs.octiga.io/tenants/mail-flow/).

## Block sign-in

Blocking sign-in disables the Microsoft 365 account and ends every session it has open, so the user is signed out everywhere as well as stopped from signing in again.

1. From an account risk finding such as a dormant account, a dormant admin, a dormant guest or a shared mailbox that's signing in, select **Resolve**.
2. Confirm. Octiga disables the account and revokes its sessions.

To let the user sign in again, re-enable the account in the Microsoft 365 admin center.

## Reset password

Octiga shows you the new password before applying it, so you can hand it to the user safely.

*Screenshot: The Reset password dialog, showing the candidate password ready to copy.*

1. User the password is for
2. The candidate password — hover to reveal Copy
3. Reset password

1) Open **Reset password** from a mailbox's side sheet, an alert's user actions, or an account risk finding such as an admin with a mailbox or an anonymous admin.
2) Hover the password panel to reveal **Copy**, and copy it somewhere safe. It isn't shown again after the dialog closes.
3) Select **Reset password** to apply it.

Once the reset is applied, the user has to choose a new password the next time they sign in, and every device or browser they were signed in on is signed out.

## Automatic lockout

When automatic lockout is on (for a whole tenant or, separately, for an individual user), Octiga blocks sign-in the moment a serious risk event happens against a specific person's account. The effect is the same as Block sign-in, applied automatically rather than by an operator, and Octiga also sends a lockout email telling whoever needs to know that it happened.

> **Danger:** Automatic lockout disables an account the moment it triggers, without anyone approving it. Let everyone who relies on the tenant know before you turn it on, so a lockout doesn't take them by surprise.

### Turn automatic lockout on or off

*Coming soon. This part of Octiga isn't built yet. Check back once it ships.*

## What each remedy changes, and how to reverse it

| Remedy            | What changes in Microsoft 365                                                          | How to reverse it                                                     |
| ----------------- | -------------------------------------------------------------------------------------- | --------------------------------------------------------------------- |
| Block sign-in     | The account is disabled and every open session ends                                    | Re-enable the account in the Microsoft 365 admin center               |
| Reset password    | A new password is set, a change is forced at next sign-in, and every open session ends | Not reversible — reset again if the new password also needs to change |
| Automatic lockout | Same as Block sign-in, plus a lockout email is sent                                    | Same as Block sign-in                                                 |