Synchronizing and Resetting Your Mac Login Password

This article helps Brandeis community members understand the difference between their Brandeis network password and their local computer login password, and provides instructions on how to keep them synchronized.

This article helps Brandeis community members understand the difference between their Brandeis network password and their local computer login password, and provides instructions on how to keep them synchronized.

---

Overview: Brandeis Password vs. Local Login Password

On Brandeis-managed computers, there is an important distinction between two types of passwords:

• Brandeis Network Password: Used for online services such as Email, Workday, and Wi-Fi (eduroam).

• Local Login Password: Used to physically unlock your computer hardware.

⚠️ Important Note for Mac Users: While Windows PCs generally synchronize these passwords automatically when connected to the network or VPN, macOS devices require manual synchronization. Changing your Brandeis password online does not automatically update the password you use to unlock your MacBook.

---

What You Need Before You Begin

To successfully sync or reset your password, ensure you have the following:

• An active Brandeis account and your new credentials.

• A connection to the eduroam Wi-Fi network (if on campus) or the Brandeis VPN (if off campus).

• Knowledge of whether FileVault encryption is enabled on your Mac.

---

Step-by-Step Instructions

1. Synchronizing Your Mac Login with a New Brandeis Password

If you have recently changed your Brandeis password online, follow these steps to sync it with your Mac:

1. Log in to your Mac using your old password.

2. Connect to the eduroam Wi-Fi or launch the Brandeis VPN.

3. Click the Apple Menu () in the top-left corner and select Lock Screen.

4. Wait approximately 30 seconds.

5. Attempt to log back in using your new Brandeis password.

6. If a "Login Keychain" prompt appears, enter your old password one final time to authorize and update your secure local storage.

2. Resetting a Mac Account Password (If Locked Out)

If you are completely locked out of your primary account, a secondary Local Administrator account can be used to manually reset it:

1. Log into the computer using the secondary Local Administrator account.

2. Open the user settings based on your macOS version:

   • macOS Ventura / Sonoma: Navigate to System Settings > Users & Groups.

   • macOS Monterey and older: Navigate to System Preferences > Users & Groups.

3. Select the target user's name (or click the "i" Info icon) and choose Reset Password.

4. Enter the new password and reboot the computer to finalize your changes.

---

🛑 Critical Warning: FileVault & Encryption Limitations

If your Mac utilizes FileVault hardware encryption, please be aware of the following security guardrails:

• Permanent Data Loss: If FileVault is active and both your login password and your Recovery Key are lost, your data cannot be recovered.

• The Only Solution: In the event of a locked encrypted drive with missing credentials, the machine must be completely wiped and the OS reinstalled, resulting in total data loss.

---

Troubleshooting & Common Fixes

Issue	Solution
Windows Account Lockout	Account lockouts are temporary. Wait 30 minutes for the lockout timer to automatically expire before trying again.
First Login Off-Campus	If you changed your password off-campus, make sure your VPN is actively connected at the lock screen when logging in for the first time.
Password Works Online But Not on Computer	If your password successfully signs into web services (like email) but fails on your machine, contact the Help Desk to verify your computer's Active Directory connection status.