How to Reset an IAM User Password with AWS CLI

To reset another IAM user’s console password with AWS CLI, run aws iam update-login-profile as an authorized administrator. Use --password-reset-required for a temporary password. An IAM user changing their own password must use the separate aws iam change-password command.

Choose the right task: Admin resets another user’s password · IAM user changes their own password · Admin reset with AWS CLI

This command applies to IAM users with AWS Management Console access. It does not reset credentials managed by IAM Identity Center or an external identity provider.

Change password for an IAM user using AWS CLI

Use an administrator role with permission to update the user’s login profile:

To reset the password for an IAM user, run following command
```
aws iam update-login-profile --user-name <IAM_user_name> --password <user_password> --password-reset-required
```
The --password-reset-required flag makes the user choose a new password at their next sign-in. Omit it only when the supplied value is intended to remain the user’s password.

Do not place plaintext passwords in shell history, process lists, CI output, or shared terminal recordings. Prefer a secure, interactive credential-delivery process.

Verify that the login profile exists:

aws iam get-login-profile --user-name IAM_USER_NAME

If the user does not have a login profile, confirm that console access is intended before creating one. Programmatic access keys and federated identities are different credentials.

Self-service uses a different command

An IAM user changing their own known password uses:

aws iam change-password \
  --old-password 'CURRENT_PASSWORD' \
  --new-password 'NEW_PASSWORD'

change-password acts on the user associated with the calling credentials and has no --user-name argument.

Official AWS references

Updated August 2026.