How to remove "Forgot your password?" link in External Entra ID?

Question

Hi, i've tried to remove "Forgot your password?" link in Default (not custom) sign in sign up flow in Entra Id for external users. And at some point it worked. Recently was found that link is showing again and i could do nothing to remove it. There is no set up self password reset and in branding option is unchecked. I've read that it could be not removable for email + password sign in, but hope there is any solution as it's required to remove it.

Answer 1

Hello Tetiana Makovii,

In Microsoft Entra External ID, when using the default sign‑in/sign‑up user flow with Email + Password (local accounts), the “Forgot your password?” link cannot be permanently removed. Even if self‑service password reset is not configured and the branding option is unchecked, the link may still appear — this is by design.

The only supported way to fully remove it is by using custom policies with custom HTML.

https://learn.microsoft.com/en-us/azure/active-directory-b2c/custom-policy-overview

Answer 2

The "Forgot password?" link on the external Microsoft Entra ID sign‑in page is controlled by the self‑service password reset (SSPR) configuration in the tenant’s branding for external identities.

For external tenants, the only supported way to hide or change that link is through the Self-service password reset section of the company branding for the external tenant:

1. In the Microsoft Entra admin center, open the external tenant and go to the company branding settings for the default sign‑in experience.
2. Scroll to Self-service password reset.
3. Clear Show self-service password reset if the link should not be displayed at all.
4. If the link should be shown but customized, keep the checkbox selected and configure:
   • Common URL – a custom password reset URL instead of the Microsoft default.
   • Account collection display text – custom text instead of "Can’t access your account".
   • Password collection display text – custom text instead of "Forgot password".
5. Save the branding configuration and allow time for propagation.

When Show self-service password reset is unchecked in this branding configuration, the platform does not provide an additional supported method to remove the built‑in password reset link specifically for email+password local accounts beyond this setting. If the link still appears after confirming the branding setting in the correct external tenant and waiting for propagation, the behavior is by design for that sign‑in method.

---

References:

• Customize the neutral branding in your external tenant
• Enable self-service password reset for customers
• Identity providers for external tenants
• Configure your company branding
• Customize the user experience for Microsoft Entra self-service password reset