A credential reset replaces a password or another access secret when it may have been exposed or compromised. It is different from simply changing a password as routine maintenance: a reset is usually part of a security response intended to invalidate a potentially stolen credential and restore control of an account.
In cyber security, resets can limit an attacker’s ability to reuse stolen credentials, but they should be paired with checks for suspicious logins, active sessions, and changes to account recovery settings. For an email account, defenders may also review mailbox rules and connected applications, since changing a password alone may not remove every form of unauthorized access. Organizations should use verified reset procedures and communicate them through trusted channels to avoid phishing and impersonation.