# Reset Credentials flow and OTP

**URL:** <https://forum.keycloak.org/t/reset-credentials-flow-and-otp/2058>\
**Category:** Configuring the server\
**Created:** [April 8, 2020, 4:03pm UTC](https://forum.keycloak.org/t/reset-credentials-flow-and-otp/2058 "2020-04-08T16:03:19Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![arozar](https://avatars.discourse-cdn.com/v4/letter/a/2bfe46/32.png) [@arozar](https://forum.keycloak.org/u/arozar)\
**Post date:** [April 8, 2020, 4:03pm UTC](https://forum.keycloak.org/t/reset-credentials-flow-and-otp/2058/1 "2020-04-08T16:03:19Z")

</div>

Under the `Reset Credentials` flow I can disable the forcing of a user to set the OTP by setting the `Reset OTP` to disable. But when the user resets their password they are not required to use OTP for this session, and they are logged right in. Is there a way to force a new login after the password has been rest instead of auto-login after rest?