SSPR@APU - Change Password

Overview

Changing your APKey password is now fully centralised and secured through Microsoft Self-Service Password Reset (SSPR).

📌 All password changes must be performed via Microsoft’s Security portal.
Once updated, your new password will automatically apply to all APU systems, including:

APSpace
Microsoft 365 (Outlook, Teams, OneDrive)
Moodle
Lab & workstation logins
Other systems using APKey authentication

✅ Official Password Change URL (Mandatory)

All users must change their APKey password using the following URL:

👉 https://mysignins.microsoft.com/security-info/password/change

❌ Password changes via CAS, APSpace or other systems are no longer supported.

How to Change Your APKey@APU Password

Step 1: Open the Microsoft Security Portal

Go to:

👉 https://mysignins.microsoft.com/security-info/password/change

Step 2: Sign In Using Your APKey Credentials (If prompted)

Students:
username@mail.apu.edu.my
Staff:
username@apu.edu.my

Enter your current password to proceed.

Step 3: Change Your Password

Enter your new password
Confirm the new password
Click Submit

If you get a error message

'Unfortunately, you can't use that password because it contains words or characters that have been blocked by your administrator. Please try again with a different password.'.

When a password is changed or reset for any user in APU 's Digital Ecosystem, the current version of the global banned password list is used to validate the strength of the password. This validation check results in stronger passwords for all APU users. The global banned password list is automatically applied to all users by Microsoft.
Please use a different password.

Password Policy (Official Reference)

All passwords must comply with APU’s Password & Authentication Policy.

Password Policy can be reviewed here

⚠️ Passwords that do not comply with this policy will be rejected.

Common Error Message

If you receive the following error:

“Unfortunately, you can't use that password because it contains words or characters that have been blocked by your administrator.”

This indicates that your password violates the Password Policy or Banned Password List.

👉 Please choose a different password in accordance with the policy above.

Step 4: Sign Out Everywhere (Recommended)

After successfully changing your password:

Click Sign out everywhere
Close all browsers and applications
Log in again using your new password

🔐 This ensures all active sessions are refreshed and secured.

Important Notes

Password changes apply:
- Immediately for Microsoft services
- Shortly after for APSpace, Moodle, and lab systems
You may be logged out from active sessions and required to re-authenticate

Need Assistance?

If you encounter any issues:

Raise a ticket via the ITSM Portal by using your APU Email address or registered personal email