Password reset using an asymmetric encryption key pair

A system for securely performing a password change, comprising:

• one or more memories;
• and
• at least one processor each coupled to at least one of the memories and configured to perform operations comprising:
• receiving a password change request from a user, wherein the password change request comprises (i) a first representation of a new password for the user and (ii) a second representation of the new password derived using a private key associated with the user;
• executing a command from a password rotator user account with the first representation and the second representation;
• determining, based on a public key associated with the user, that the password change request comes from the user and that the first representation has not been modified;
• and
• setting a password of a user login associated with the user to the new password in response to the determining.

A non-transitory computer-readable device having instructions stored thereon that, when executed by at least one computing device, cause the at least one computing device to perform operations comprising:

• receiving a password change request from a user, wherein the password change request comprises (i) a first representation of a new password for the user and (ii) a second representation of the new password derived using a private key associated with the user;
• executing a command from a password rotator user account with the first representation and the second representation;
• determining, based on a public key associated with the user, that the password change request comes from the user and that the first representation has not been modified;
• and
• setting a password of a user login associated with the user to the new password in response to the determining.