Someone changed your password

If you think someone changed your password

If you believe someone else has changed your LuxID password without your permission, take the following steps immediately. If an attacker may have full control of your account, also see Secure a compromised LuxID Account for the complete walkthrough.

Reset your password

1. Go to the password reset page (opens in a new tab).
2. Enter the email address associated with your LuxID Account.
3. Follow the instructions sent to your email to set a new password.
4. Choose a strong, unique password that you have not used before.

Review your account security

Once you have regained access:

1. Sign in to your LuxID Account (opens in a new tab).
2. Go to Security and review your settings.
3. Enable or verify 2-Step Verification to add an extra layer of protection.
4. Check that your email address and phone number are correct.

Secure your email account

Since your LuxID Account uses your email address as your identifier, make sure your email account itself is also secure:

• Change your email account password if you suspect it may have been compromised.
• Enable 2-Step Verification on your email account as well.

If you received a password reset email you did not request

If you received a password reset email that you did not initiate, your account is likely still secure. Someone may have entered your email address by mistake. You do not need to take any action - simply ignore the message.

If this happens repeatedly, see Unrequested password reset messages.

How accounts get compromised

An attacker may obtain your password through one of these methods:

• Reused password - If you used the same password for LuxID and another service, and that other service was breached, your LuxID Account could be at risk.
• Phishing - You entered your password on a website designed to look like LuxID.
• Malware or keylogger - Your computer or mobile phone was compromised by malicious software.

Need more help?

If you cannot regain access to your account, contact LuxID support.

Avoid account and password recovery scams

For your security, LuxID will never ask for your password or verification codes over email, phone, or message. Only enter your password at login.luxid.lu (opens in a new tab). Do not give out your passwords or verification codes to anyone claiming to provide account or password support. Learn how to recognise legitimate LuxID messages.