Skip to main content
Question

Reset Password Loop - Even Incognito

  • June 24, 2026
  • 1 reply
  • 65 views
M

I’ve been stuck in a reset password loop for the last few days and support on my work’s end recommend reaching out directly to Box Support.

 

I tried links - Password loop

Log in directly - Password loop

Cleared cache - Password loop 

Incognito works on and off - tried it today and its password looped, tried later and it logged in. 

 

 

 

1 reply

Rona Box
  • Rona Box
  • Community Manager
  • June 26, 2026

Hi ​@MAEJR, 

Welcome to Box Community, and we’re glad to assist! 

 

Here are the recommended troubleshooting steps to resolve this loop:

1. Adjust Browser Cookie & Privacy Settings (Most Common Cause)

Recent browser updates have tightened privacy controls, which can block the cross-site tracking cookies Box uses to maintain your session state during login redirects.

  • For Firefox:
    1. Open Firefox and click the menu icon (three lines) in the top-right corner, then select Settings.
    2. Go to the Privacy & Security tab.
    3. Under Enhanced Tracking Protection, if it is set to Standard, switch it to Custom.
    4. In the dropdown menu for Cookies, change the setting from blocking cross-site cookies to Cookies from unvisited websites (or ensure third-party cookies are not completely blocked for *.box.com).
  • For Chrome / Edge:
    1. Go to your browser's Settings > Privacy and Security > Third-party cookies.
    2. Ensure that Block third-party cookies is turned off, or add [*.]box.com to the allowed sites list under "Allowed to use third-party cookies."

2. Address Incognito and Extension Conflicts

Since Incognito works on and off, certain browser extensions or add-ons (such as ad-blockers, privacy shields, or password managers) that are allowed to run in Incognito/Private windows might be interfering with the login redirect scripts.

  • Try temporarily disabling all browser extensions (especially ad-blockers like uBlock Origin, Ghostery, or corporate security extensions) and see if the loop stops.
  • If it works with extensions disabled, re-enable them one by one to identify the culprit.

3. Clear Specific Site Data (Beyond Basic Cache)

Sometimes a corrupt local storage state or session cookie persists even after a basic cache clear.

  • Instead of a general cache clear, perform a targeted site data removal:
    1. While on the Box login page, click the lock icon next to the URL in your browser's address bar.
    2. Select Site settings or Cookies and site data.
    3. Click Clear data or Remove all to wipe out any persistent local storage or cookies specifically for Box, then restart your browser.

4. Single Sign-On (SSO) Considerations

If your organization uses Single Sign-On (SSO) to log into Box:

  • Ensure you are logging in via your company's specific Box subdomain (e.g., yourcompany.box.com) rather than the generic app.box.com/login page, as generic entry points can sometimes fail to redirect SSO credentials properly, causing a loop.
  • If your company requires a Box-specific password to supplement your SSO (for external apps or FTP), resetting that password via box.com/reset can sometimes trigger automated security loops if the SSO integration settings in your enterprise admin console are misconfigured. If the browser steps above do not work, ask your internal IT Admin to verify if there is a subdomain mismatch or a clickjacking protection setting (like Okta Clickjack protection) blocking the redirect.

 

Hope it helps! Let us know should the issue persists. 

Terms of ServiceAccessibility statement