Systems and methods of managing password using contactless card

A method, comprising:

• receiving, by a server from a call center device, a message indicating a forgotten password of an online account of a user;
• identifying, by the server, a contactless card associated with the online account;
• sending, by the server to the call center device, a first notification requesting the user to tap the contactless card to a user device associated with the user;
• receiving, by the server from the call center device, a cryptogram generated by the contactless card;
• validating, by the server, the cryptogram by comparing the cryptogram to an expected cryptogram associated with the contactless card;
• and
• sending, by the server to the call center device, a notification indicating that the online account is authenticated to perform an action related to the forgotten password.

A computing apparatus, comprising:

• a processing circuit;
• and
• a memory having executable instructions stored thereon, which when executed by the processing circuit cause the processing circuit to:
• receive, from a call center system, a message indicating a forgotten password of an online account of a user;
• query a data store to identify a contactless card associated with the online account;
• cause a message to display on a device associated with the user, the message instructing the user to tap the contactless card to the device;
• receive a cryptogram generated by the contactless card during the tap to the device;
• validate the cryptogram by comparing the cryptogram to an expected cryptogram associated with the contactless card;
• and
• send, to the call center system, a notification indicating that the online account is authenticated to perform an action related to the forgotten password.

A non-transitory computer-readable storage medium having executable instructions stored thereon, which when executed by a processing circuit, causes the processing circuit to:

• receive, from a call center server, a message indicating a forgotten password of an online account of a user;
• identify a contactless card associated with the online account;
• cause a message to be sent to a device associated with the user, the message to cause an application on the device to launch and request the user tap the contactless card to the device;
• receive encrypted data generated by the contactless card during the tap to the device;
• validate the online account by decrypting the encrypted data and comparing it to stored data associated with the user;
• and
• send, to the call center server, a notification indicating that the online account is authenticated to perform an action related to the forgotten password.