Specops uReset
Specops uReset lets users reset or change Active Directory or Entra ID passwords themselves.
What Specops uReset is
Specops uReset lets users reset or change Active Directory or Entra ID passwords themselves. Users can access resets through a web browser, Windows logon screen, or mobile app, on or off VPN. For remote Active Directory users, it can update locally cached credentials even when a domain controller cannot be reached. Administrators can require one or more identity factors, choosing from more than 20 identity providers. Enrollment can be automatic using Active Directory identifier data or prompted through email and Windows logon notifications. Admins can restrict resets by country or IP address range, and the Specops Event API streams logins, resets, and identity checks to SIEM or SOC platforms. With Specops Breached Password Protection, uReset can block known compromised passwords. It supports on-premises Active Directory, hybrid Active Directory/Entra ID, and native Entra ID. Annual subscriptions include technical support, upgrades, SMS authentication costs, and training. Pricing is based on user count and available on request; a demo or free trial can be arranged, with no trial duration stated.
Good
- Users can reset passwords through Windows logon or mobile.
- Can update cached credentials when a domain controller is unreachable.
- Supports more than 20 identity providers.
- Admins can restrict resets by country or IP range.
- Annual subscriptions include support, upgrades, and training.
Watch out
- Pricing is available only on request.
- Annual pricing depends on the number of users.
- A hybrid authentication add-on may cost extra.
- No free plan is listed.
Who it suits
uReset suits organizations that want users to manage Active Directory or Entra ID passwords without helpdesk intervention. Its deployment options cover on-premises, hybrid, and native Entra ID environments.
Verdict
Specops uReset supports self-service password changes with multiple verification and deployment options. Organizations should confirm user-count pricing and whether hybrid authentication adds cost.
Plans and prices
From Specops uReset's own pricing page, checked 15 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Specops uReset | — | Technical support and product upgrades included · hybrid hosting included · hybrid authentication may cost extra · Annual subscription; volume-based tier pricing by users in scope |
The facts
Each one read from Specops uReset's own pages, with the date it was checked.
What it does
- Access
- Users can access resets through a web browser, Windows logon screen, or mobile app, from any location and on or off VPN.checked 4 Oct 2026
- Active Directory integration
- uReset uses existing Active Directory and Group Policy, with no directory migration and no external database for password-related information.checked 15 Oct 2026
- API access
- Administrators create a 72-character API key in Authentication Web, using separate US and EU API base URLs.checked 15 Oct 2026
- Cached credentials
- For Active Directory, uReset can update local cached credentials for remote users, including when a domain controller cannot be reached.checked 4 Oct 2026
- Cloud architecture
- Authentication, web and identity services run in Specops Cloud, while customers install only the Gatekeeper component in their domain.checked 15 Oct 2026
- Cloud support
- uReset supports on-premises Active Directory, hybrid Active Directory/Entra ID, and native Entra ID environments.checked 4 Oct 2026
- Compromised-password blocking
- When paired with Specops Breached Password Protection, uReset can block passwords appearing in a database of more than five billion known compromised passwords.checked 15 Oct 2026
- Directory and deployment
- The datasheet says uReset is natively integrated with Active Directory, configured using Group Policy, stores user data in Active Directory, and hosts its authentication engine, web, and identity services in the cloud.checked 4 Oct 2026
- Documentation depth
- Specops lists 38 uReset knowledge-base articles covering passkeys, Gatekeeper migration and upgrades, event troubleshooting and related administration topics.checked 15 Oct 2026
- Enrollment
- Administrators can auto-enroll from Active Directory identifiers or guide enrollment through email, Windows notification balloons and a full-screen logon browser.checked 15 Oct 2026
- Event API
- The public Event API exposes authentication and security events for SIEM, monitoring and automation; it uses cursor pagination, supports a maximum seven-day initial history, and requires clients to handle retries, throttling and deduplication.checked 15 Oct 2026
- First Day Password
- The optional First Day Password workflow lets new hires verify themselves with mobile code or personal email before setting their first Active Directory password.checked 15 Oct 2026
- Gatekeeper
- Gatekeeper runs on a domain server, reads Active Directory data and performs enrollment-data reads and writes.checked 15 Oct 2026
- Geo and IP controls
- Administrators can allow or block password resets by country or specified IP ranges.checked 15 Oct 2026
- Geographic controls
- Admins can allow or block password resets by country or specific IP address ranges.checked 4 Oct 2026
- Licence
- The Specops license agreement states that Specops retains sole and exclusive title to all parts of the software and service, indicating proprietary licensing.checked 15 Oct 2026
- Limit: administration and Azure controls
- Reviewers report an administrator learning curve and say the product was not registered as an Azure AD application, preventing Conditional Access management.checked 15 Oct 2026
- Limit: deployment complexity
- A Software Advice reviewer reported that enabling logon reset required distributing the client, secure browser and a registry change, creating difficulties for remote laptops and prompting a request for an Intune package.checked 15 Oct 2026
- MFA
- uReset supports more than 20 identity providers and can require one or multiple factors for identity verification.checked 4 Oct 2026
The company
- Company identity
- LinkedIn describes Specops Software as a privately held enterprise password-management and authentication company founded in 2001 and headquartered in Stockholm, Sweden.checked 15 Oct 2026
- Company size
- LinkedIn lists Specops Software in the 51–200 employee range and says it has offices in the United States, Canada, France, Germany and the United Kingdom.checked 15 Oct 2026
- Founded
- 2001checked 28 Sep 2026
- Headquarters
- Stockholm, Swedenchecked 28 Sep 2026
Where it runs
- Limit: app hardware compatibility
- Google Play reviewers report that Pixel 4 and 4 XL devices without fingerprint hardware cannot use Specops Fingerprint and that registration instructions are unclear.checked 15 Oct 2026
Alternatives to Specops uReset
- 1
Cayosoft Administrator
AndroidWebAPImacOS7.0 - 2
Softerra Adaxes
Free planWebmacOSSelf-hostedWindows7.0$1,600 one-time - 3
ManageEngine ADSelfService Plus
Free planAndroidiOSWebLinux6.9From $595 a year - 4
ManageEngine AD360
WebWindows6.4 - 5
ManageEngine ADAudit Plus
Free planWebWindows6.4From $595 a year - 6
One Identity Active Roles
AndroidiOSWebSelf-hosted6.4