Fastest fix: stop clicking “Resend”. Password reset is a different, more rate-limited flow than signup verification, and every extra click pushes your wait longer (sliding window: one send per 60s, then escalating cooldowns). Then rule out the three causes that send zero email no matter how long you wait — the account is SSO-only (signed up with Google/Apple/Microsoft, so there is no password to reset), it’s a passkey-only / Advanced Account Security account (password login intentionally disabled since the April 30 2026 rollout), or the email address has a typo or alias filter. If none of those apply, wait one hour, clean up your inbox, and send the link exactly once.
The reset email comes from an OpenAI sender domain (typically noreply@tm.openai.com, sometimes noreply@openai.com), the link is one-time, and it is short-lived — treat it as expiring within the hour, so act the moment it lands.
Common causes
1. Rate-limited from too many attempts in the last hour
OpenAI throttles password resets with a sliding window: roughly one send per 60 seconds, and repeated triggers escalate the cooldown (a burst of clicks can lock the flow for hours). Mashing “Resend” is the single most common reason a reset that should take minutes ends up taking a day.
How to tell: the UI shows “Too many attempts, please try again later” or “You’ve requested too many emails.” Sometimes no error appears at all and the email simply never lands.
2. Account is SSO-only — there is no password to reset
Accounts created via Continue with Google / Apple / Microsoft have no independent password by default. “Forgot password?” silently does nothing because there is no password credential to reset, and OpenAI deliberately won’t reveal whether an account exists or which auth method it uses (this prevents account-existence probing).
How to tell: enter the email on the login page. If the next screen leads with “Continue with Google / Apple / Microsoft,” the account is SSO-only.
The fix is not the email — it’s adding a password. Sign in with the original SSO button, then go to Settings → Account and add a password there. After that, email + password login works alongside SSO (as long as the email matches, OpenAI links both methods to the same account). The one exception: if your account belongs to an organization that enforces SSO, the “add password” option is disabled and you must keep using SSO.
3. Account uses passkeys or Advanced Account Security
Since OpenAI’s passkey rollout (late April 2026) and the Advanced Account Security opt-in (announced April 30 2026), some accounts have password login disabled entirely. Advanced Account Security goes further: it removes conventional recovery (email/SMS) on purpose, so the reset email will never arrive, and OpenAI Support does not assist with recovery in this mode — you can only get back in with a backup passkey, security key, or recovery key.
How to tell: on the login page, the account prompts for a passkey/security key rather than a password, or you remember enabling “Advanced Account Security.” If so, stop waiting on email and use your saved passkey or recovery key.
4. Greylisting or spam filter on your email provider
Enterprise inboxes (Outlook with Microsoft Defender for Office 365, Mimecast, Proofpoint) frequently greylist unknown senders — they return a temporary 451 defer, ask the sender to retry, and delay delivery 2-6 hours. OpenAI mail can also land in Spam, Promotions, Updates, or a quarantine.
How to tell: it didn’t arrive within an hour but showed up 6 hours later = greylisting. Check Spam / Promotions / Updates / Trash and your provider’s quarantine.
5. Account on a suspicious-activity hold
If you recently signed in from an unfamiliar IP or country, or failed-login attempts tripped risk control, the reset flow can be frozen — OpenAI withholds the email until the hold clears.
How to tell: search your inbox for an earlier “Suspicious sign-in attempt,” “New device,” or “Verify it’s you” notification.
6. Address typo or alias filtered
You used a name+gpt@gmail.com alias at signup, but a Gmail filter auto-archives anything containing +gpt; or the signup address was a typo like n@gnail.com pointing at a domain that doesn’t exist (so the email bounces silently).
How to tell: search +gpt in your inbox for archived hits, or sign in via SSO and check Settings → Account for the exact signup spelling.
Which bucket are you in?
| Symptom on the login page | Likely cause | Where to go |
|---|---|---|
| Leads with “Continue with Google/Apple/Microsoft” | SSO-only (cause 2) | Sign in via SSO, add a password in Settings |
| Asks for a passkey/security key | Passkey or Advanced Security (cause 3) | Use passkey/recovery key, not email |
| Password field, “Too many attempts” error | Rate-limited (cause 1) | Wait one hour, send once |
| Password field, no error, nothing arrives | Spam/greylist, hold, or typo (4/5/6) | Work the steps below |
Shortest path to fix
The single most important rule: stop clicking “Resend”. Every extra click extends the wait.
Step 1: Confirm it isn’t SSO-only, passkey-only, or Advanced Security
Enter the email on the login page (don’t enter a password) and read the next screen:
| Shown | Meaning | Action |
|---|---|---|
| Password field | Has a password, can reset | Continue to Step 2 |
| ”Continue with Google/Apple/Microsoft” first | SSO-only, no password | Sign in via that SSO, then add a password in Settings → Account; the reset email will never arrive |
| Passkey / security-key prompt | Passkey or Advanced Account Security | Use your passkey or recovery key; email reset is disabled |
| Both a password field and SSO buttons | Dual method | Continue to Step 2 |
Step 2: Wait one hour, clean up your inbox in the meantime
Don’t click “Resend”. Use these 60 minutes to:
Inbox search: openai
Check folders: Inbox / Spam / Promotions / Updates / Trash / Archive / quarantine
Check rules: Gmail Settings → Filters → any rule archiving openai mail?
Whitelist: noreply@openai.com, noreply@tm.openai.com, *@openai.comGmail whitelist procedure:
Settings → Filters and Blocked Addresses → Create a new filter
From: noreply@openai.com OR noreply@tm.openai.com
→ Never send it to Spam, Always mark it as importantStep 3: After one hour, send exactly once
chatgpt.com/auth/login → Forgot password? → enter email → Send link → close the tabClosing the tab prevents accidental “Resend” clicks. Then check your inbox within 5 minutes.
Step 4: When the email arrives, act immediately
The link is one-time and short-lived (treat it as expiring within the hour). Some “link preview” or safe-link features (Outlook/Defender, security gateways) auto-visit URLs, which can invalidate a one-time link before you click it. So once it arrives:
- Click directly in the email client — don’t preview it in third-party tools or link scanners.
- Complete the new-password form in the browser within a few minutes. As of June 2026, OpenAI enforces stronger password rules — use at least 12 characters with mixed case, a number, and a symbol, and avoid common phrases.
- Right after, go to Settings → Security → Log out of all devices (also surfaced as “Log out all other sessions”) to kill any sessions an attacker may hold.
- Save the new password to your password manager immediately.
Step 5: Suspect a suspicious-activity hold
If Step 3 still produces nothing and Step 1 confirmed a password exists:
- Try the original password once (even a partial guess of what you remember). Watch for a “Verify it’s you” or email-verification challenge.
- Complete that verification — the hold usually clears.
- Then try the reset again.
If nothing works, open a ticket at help.openai.com with details that help them locate the account:
Subject: Password reset email never arrives - account hold suspected
Account email: your-email@example.com
Last successful login: YYYY-MM-DD from [country]
Subscription: Plus / Go / Pro (if applicable)Step 6: Switch email as a last resort
If your inbox is confirmed to block OpenAI and IT can’t whitelist it:
- Open a ticket asking OpenAI to change the login email (identity verification required; allow several business days).
- Or write off the account and register a fresh one — note that subscription and chat history do not transfer.
How to confirm it’s fixed
- Fully sign out, then sign in at
chatgpt.com/auth/loginwith the new password — no SSO button. - The login should succeed without a “Verify it’s you” prompt; if one appears, that’s a fresh device check, not a failure.
- Open Settings → Account and confirm a password is shown as set (and Settings → Security to confirm only your sessions remain).
- If you added a password to an SSO-only account, confirm both methods now work: sign in once with the password and once with the SSO button.
Prevention
- Use a personal Gmail / iCloud / Outlook inbox for ChatGPT signup, not a corporate one (corporate Defender/ATP filtering is the strictest).
- Save your password in a manager (1Password / Bitwarden) and skip habitual resets — most reset attempts are unnecessary.
- Stick with one SSO method consistently to avoid the “no password to reset” trap, or add a password in Settings so you always have a fallback.
- Consider registering a passkey: it sidesteps the email-reset flow entirely. Just keep a recovery key somewhere safe if you ever enable Advanced Account Security.
- Pre-whitelist OpenAI’s sender domains before anything breaks.
Related reading
- Verification email missing
- ChatGPT login loop
- Wrong auth method after signup
- 2FA locked out
- Session expired repeatedly
Tags: #ChatGPT #ChatGPT account #Troubleshooting #Debug #Password reset