---
title: "Check Locked Accounts During Forget Password"
slug: "security-enhancement-1"
updated: 2026-01-30T05:18:32Z
published: 2026-01-30T05:18:32Z
canonical: "zenoplesupport.aqore.com/security-enhancement-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://zenoplesupport.aqore.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Check Locked Accounts During Forget Password

This feature introduces an enhanced security measure within Zenople by Aqore to ensure that locked user accounts cannot proceed with the Forget Password process. The system now validates the account status before sending an OTP, preventing unauthorized access attempts and strengthening overall platform security.

**Why it matters**

This update enhances control over account access by ensuring that only administrators can approve password resets for locked users, thereby supporting stronger compliance and effective access management.

**Key Benefits**

- Strengthened security and protection from unauthorized access
- Improved compliance with access-control requirements
- Clear communication to users, reducing confusion during login issues
- Streamlined administrative control over account reactivation

### Functionality

**1. Feature Addition**

- The update is applied to the **Forget Password** process available across all Zenople portals where users initiate password recovery.
- No new UI components are added; the change applies to backend validation and user-facing messaging.

**2. Behavior**

When a user begins the Forget Password process:

1. The system locates the user account based on the provided details.
2. Before generating or sending an OTP, the system checks whether the account is locked.
3. If the account is **locked**:
  - The OTP will *not* be generated or sent.
  - The Forget Password process will immediately stop.
  - The user will see a clear message stating:

**“Your Account has been locked. Please contact your Admin to access your system again.”**

1. If the account is **not locked**, the Forget Password process continues normally.

#### ****Additional Notes****

- Administrators retain full control over unlocking user accounts by following the provided steps:
  - Locate the person’s record in ATS, NHO or EIS.
  - Go to the Login Information navigation action. (This navigation action is only visible to permitted users.)
  - Open the **Login Info** action. In the top-right corner, switch the toggle to change the user’s login status from **Locked** to **Active**.