Now available: AI-powered summaries, reference chat and smarter reference discovery. Read more here.
Please note that this password requirement is for EndNote Online/Web only. If you do not have an EndNote Online/Web account, you won't need to set up or change a password.
Alfasoft would like to inform our EndNote customers about an upcoming security update introduced by Clarivate, the producer of EndNote.
Beginning February 12, 2026, EndNote will implement a password expiration policy requiring all users to update their passwords every 180 days. This change is part of Clarivate’s ongoing effort to enhance account protection and align with current industry security standards.
Here’s what you need to know:
- If your password is older than 180 days, EndNote will prompt you to create a new one the next time you log in.
- You’ll receive reminders as your password approaches expiration.
- You can change your password anytime using the Forgot Password page.
Please note!
If you no longer have access to the email address linked to your EndNote account, update it before February 2026 to avoid being locked out.
- Go to www.myendnoteweb.com, and login.
- Navigate to Options > E-mail Address, and update your contact email.
- You can also change your password under Options > Password.
Failing to update your registered email could result in being locked out of your account after the new policy takes effect.
FAQs
- Does this change affect me? No immediate action is required unless your password expires. The change is a security enhancement only.
- Which products are affected? The policy applies to EndNote Online/Web and Web of Science because they share the same login credentials.
- “No account exists for the specified email address” error Password reset links are sent only to email addresses registered to an EndNote Online/Web account. Software product registration is separate from account creation.
- Do I need to change my EndNote Web password separately? No. EndNote Web and EndNote Online use the same password. If you use EndNote 2025 or EndNote 21, you may need to activate your EndNote Web account.
- Impact on iOS devices (iPhone, iPad) After resetting your password, sign in again on all iOS devices using the new password.
- Impact on EndNote Click or ProQuest No impact. These use separate login systems.
- Impact on Cite While You Write (CWYW) If you use the EndNote Online add-in in Word, Word Online add-in, or Google Docs add-on, sign in again with the new password to continue citing.
- Update the password in EndNote desktop (for Sync and Share)
- For Windows: EndNote > Edit > Preferences > Sync
- For macOS: EndNote menu > Settings/Preferences > Sync Save the changes to resume syncing.
- Desktop-only use EndNote desktop continues to work normally. Sync, Share, and cloud services pause until the password is updated.
- If the password is not changed after 180 days You will not be able to sign in to EndNote Online/Web or use Sync, CWYW, or Google Docs services until the password is reset.
- Forgot both email and password but still have a synced library Contact Technical Support for ownership verification and manual assistance.
- Can the password be changed inside the desktop app? No. Use the “Forgot Password” page, then update the new password in the Sync preferences.
- Password reset link does not work Reset links expire after one day. Request a new link or try a different browser.
- Shared libraries and groups Shared access relies on active EndNote Online/Web accounts. Expired passwords will affect shared services.
- Using EndNote on multiple computers Update the password in Sync settings on every device to avoid sync errors.
- Common error messages after password expiration
- “Invalid email/password. Please try again.”
- “The username/password specified is not valid.”
- “Server.AuthenticationToken.invalidUserCredentials.”
- Is two-factor authentication (2FA) planned? There are no current plans, but feedback is welcome through the EndNote Forum.
Important notes
- Password expiration is a security policy, not a software fault.
- Desktop libraries are not deleted or damaged by password expiry.
- Only cloud-connected features are affected.