Skip to content

Password Express

Password Express is a virtual appliance for performing Self-Service Password Reset (SSPR) for Active Directory, Microsoft Entra ID, and Google Workspace.

What Password Express Does for You

Password Express gives you a self-contained appliance for letting users reset their own passwords, without opening a helpdesk ticket. You can:

  • Support unlimited users with zero enrollment required, by using phone numbers and email addresses already stored in Active Directory.
  • Connect to your on-premise Active Directory using the Windows Connect reverse SSH client.
  • Add 2FA and other requirements to Windows logins and RDP prompts with the Windows Credential Provider.
  • Fine-tune how users authenticate for password resets, Windows logins, and other access, through Authentication Policies.
  • Enroll users for stronger credentials when your policies require it.

Why It’s Better Than Managing Password Resets Yourself

Handling password resets manually means helpdesk tickets, delays, and inconsistent verification of who is actually asking for the reset. Password Express automates this safely from a single appliance.

That means:

  • Users can reset their own passwords using contact details already in Active Directory, with no separate enrollment step required.
  • Windows Connect keeps your tenant in sync with Active Directory as users interact with the system, so there's no manual account import.
  • Authentication Policies let you require different levels of verification for different types of access, such as a password reset versus a Windows login.
  • The Windows Credential Provider extends the Windows login and RDP prompt with password reset and 2FA support.
  • You spend less time handling reset requests and more time on the rest of your job.

Tip

As long as your Active Directory users have a phone number or email address on their profile, they can use Password Express without any further setup on your part.

Quick Start

Password Express can be deployed as a virtual appliance on your preferred hypervisor, or run with Docker.

  1. Download the Password Express Community appliance, or pull the jadaptive/password-express Docker image, and start it up.
  2. Install and configure Windows Connect to link your tenant to Active Directory.
  3. Perform your first password reset to confirm everything is working.
  4. Configure Authentication Policies to tighten up security for each type of access.
  5. Enroll a user if your policies require stronger credentials.
  6. Install the Windows Credential Provider if you want password resets and 2FA available from the Windows login prompt.

Tip

The full walkthrough is covered in Getting Started with Password Express.

Licensing

Password Express is available as a fully featured Community Edition that you can run yourself, either as a virtual appliance or with Docker.

At Jadaptive, we believe the software itself should be freely available, while expert help and advanced support are where the value lies. You can read more in our manifesto.