The Lawrenceville School

ITS Department

Password Reset Site Instructions

The Lawrenceville School’s Password Reset Site provides a way for employees and students to reset a lost, forgotten, or potentially compromised password from anywhere, at any time, without needing to contact the ITS department. Access is secured by the user’s choice of hardware key, app-based token, or security questions.

The site can be accessed at the following link:

https://password.lawrenceville.org

The login screen looks like this:

Everyone Must Re-Enroll Before Using

The current version of the Password Reset Site was launched in October of 2020. User preferences from the old site - including choice of, and answers to, security questions - could not be carried over to the new site, as the answers are encrypted and not available to the ITS department.

Because of this, all Lawrentians must go through the enrollment steps below before they can reset their passwords, or recover a lost password, using the new site.

Enrolling Your Account

1. Open the Password Reset Site in your web browser - https://password.lawrenceville.org/
2. At the login screen, enter your Lawrenceville username and password. (If you do not know your current password, please contact the ITS department for assistance.)
3. You will be asked to enroll one of three verification methods. See the sections below for details on each method.

1. Google Authenticator is the preferred method. It uses an app on your phone, and does not require any internet connection or text messages to work. Despite the name, it can be used with any number of apps that include time-based codes including Authy, Microsoft Authenticator, Duo Mobile, 1Password, or Lastpass Authenticator. See the section below for more information on these apps. (Note: This is not the same as the 2-Step Verification you use with your Lawrenceville Gmail.)
2. Yubikey Authenticator is the most secure option, but you will need to have a Yubikey device to use it. If you own one, feel free to use it here.
3. Security Questions should be used if you cannot use either of the above options.

4. After enrolling a verification method, you will be taken to the Change Password screen. You do not need to change your password at this time. You can click the person icon in the top-right corner of the page, then click Sign Out to finish enrolling.

Verification Method 1: Google Authenticator

The Google Authenticator method supports any number of apps that support “time based” codes. The app provides a code which changes every 30 seconds and is impossible for anyone to guess. Unlike phone call or text-message options, it does not require an internet connection or even any cell signal at all to work.

Who Should Use This Option

We recommend this option for anyone who has a smartphone. Many free apps are available, and it does not provide Lawrenceville with any information about or access to your device, nor does it place any of Lawrenceville’s information on your device.

Choosing an App

We suggest using one of the following apps, but you can use any app that supports time-based codes.

Enrolling With an Authenticator App

1. At Step 3 under Enrolling Your Account, choose Google Authenticator and click Next
2. The site will display a QR code for your app to scan. In your chosen app, add an account and scan the QR code. If the code will not scan, click the “Can’t scan the image?” link and you will be given a code to type in instead.
3. After adding this account to your app, enter the code it shows into the Password Reset Site and click Next.
4. You will be taken to the Change Password screen. You do not need to change your password at this time. You can click the person icon in the top-right corner of the page, then click Sign Out to finish enrolling.

Verification Method 2: Yubikey Authenticator

One of the most secure ways to verify any account that supports it, the Yubikey is a keychain-sized device that connects to your device using USB, Lightning port, or NFC (on phones and tablets).

You can also use a Yubikey to secure your Lawrenceville Google account, if you have a Yubikey that is compatible with your phone.

Who Should Use This Option

Because of the cost, we recommend the Yubikey option for anyone who already owns a Yubikey device. If you don’t own one but are interested, they are available online for between $20 - $80 depending on features. The ITS department can help you choose which model is best for you.

• Shop Yubikeys on Amazon
• Shop Yubikeys on Yubico.com

Enrolling With Yubikey

1. At Step 3 under Enrolling Your Account, choose Yubikey Authenticator and click Next
2. Follow the instructions on the Password Reset site to enroll your Yubikey.
3. You will be taken to the Change Password screen. You do not need to change your password at this time. You can click the person icon in the top-right corner of the page, then click Sign Out to finish enrolling.

Verification Method 3: Security Questions

Security questions aim to secure access to your account by asking you questions that only you can answer.

Who Should Use This Option

Anyone who cannot use the Google Authenticator or Yubikey methods can enroll using Security Questions.

Enrolling With Security Questions

1. At Step 3 under Enrolling Your Account, choose Security Questions and click Next
2. You will be prompted to answer a total of five questions. The next time you log in or reset your password, you will need to answer two of the questions, chosen at random.

1. When choosing which questions to answer, pick ones which cannot be easily guessed by friends or colleagues.
2. Answers are not case-sensitive, but do need to be typed exactly as entered.
3. The answer cannot include your username or any of the words in the question, and you cannot give the same answer to more than one question.

3. You will be taken to the Change Password screen. You do not need to change your password at this time. You can click the person icon in the top-right corner of the page, then click Sign Out to finish enrolling.

Changing Your Password

You can change your password at any time after you enroll. You might want to do so because you suspect you have entered your password on a scam site, or because you think someone else may know what it is, or simply because you’ve had the same password for a while and want to make sure it stays unknown.

To Change Your Password

1. Open the Password Reset Site at https://password.lawrenceville.org
2. Enter your username and password, and click Login
3. Enter your Google Authenticator code, Yubikey, or Security Questions
4. Next you will be taken to the Change Password form
5. Enter your current password, then choose a new password and type it into both of the “New Password” boxes.

1. Your new password must meet certain requirements listed below the form. Checkmarks will appear as you type to show when you’ve met each requirement.

6. When you are ready, click the “Change password” button. Your password will be updated immediately.
7. Remember you will need to update this password in any device’s Wifi settings if you are connected to LVWlan, and you may need to sign in to your Lawrenceville Google account again on any device where you use it.

Resetting a Forgotten Password

If you have forgotten your password, you can use the site to reset it at any time after you enroll.

To Reset Your Password

1. Open the Password Reset Site at https://password.lawrenceville.org
2. Click the “Forgot your password?” option under the Sign In form
3. Enter your username and the Captcha code shown on your screen.

1. If you cannot read the Captcha code, you can click the circular arrow icon to get a new code, or click the speaker icon to have the code read out loud to you.
2. If the site will not accept the Captcha code after 2-3 tries, close all browser tabs with the Password Reset Site, open a new one, and try again. Or, use a Private Browsing or Incognito session.

4. Confirm your identity using your Google Authenticator code, Yubikey, or Security Questions
5. Next you will be taken to the Change Password form. You must choose a new password within 10 minutes or you will be logged out and need to start again from Step 1.
6. Choose a new password and type it into both of the “New Password” boxes.

1. Your new password must meet certain requirements listed below the form. Checkmarks will appear as you type to show when you’ve met each requirement.

7. When you are ready, click the “Change password” button. Your password will be updated immediately.
8. Remember you will need to update this password in any device’s Wifi settings if you are connected to LVWlan, and you may need to sign in to your Lawrenceville Google account again on any device where you use it.

Changing Your Verification Method

You can change whether your Password Reset account is secured with Security Questions, an Authenticator App, or a Yubikey.

To Change Your Verification Method

1. Open the Password Reset Site at https://password.lawrenceville.org
2. Enter your username and password, and click Login
3. Enter your Google Authenticator code, Yubikey, or Security Questions
4. Next you will be taken to the Change Password form. At the top of the page, click the Enrollment tab.
5. Select one of the other Verification methods by clicking the “Set up” link below it. Refer to the sections above on each method for details.
6. Once you have enrolled a new method, you can leave both the old and new active, or remove the old method from your account.

1. To remove a verification method, click the pencil icon next to its description, then click Remove.
2. You cannot remove your last verification method - you must set up a new one first.