How to recover a forgotten Kite password on Zerodha

From WebNotes, a public knowledge base. Last updated . Reading time ~6 min. Level: Beginner.

If you have forgotten your Kite trading password, Zerodha provides a self-service password reset flow accessible from the login screen. The process requires access to the mobile number registered with your Zerodha account, as the OTP for identity verification is sent to that number.

This guide covers the standard reset flow, troubleshooting when the OTP does not arrive, and what to do if your account appears locked.

Conflict-of-interest disclosure. This guide is published by WebNotes Editorial Team for informational purposes only. WebNotes has no commercial relationship with Zerodha.

Prerequisites

  • Your Zerodha client ID (6-character alphanumeric code, visible in any Zerodha email or on Console) or your PAN number.
  • Access to the mobile number registered with your Zerodha account to receive the OTP.
  • A browser (preferably on a desktop) or the Kite mobile app.

Step 1: Open the Kite login screen

On a browser, navigate to kite.zerodha.com. On the Kite mobile app, open the app and reach the login screen (force-close and reopen if you are already logged in on another device and want to reset the password first).

Step 2: Click “Forgot password?”

On the login page, below the password input field, click or tap the Forgot password? link. You are redirected to the Zerodha password reset page (kite.zerodha.com/forgot-password or the mobile equivalent).

Step 3: Enter your client ID or PAN

On the reset page, enter either:

  • Your Zerodha client ID: the 6-character code beginning with your state code (e.g., AB1234, ZM1234). This is printed on your account opening confirmation email and visible in Console under Account > Personal Details.
  • Your PAN number: the 10-character alphanumeric PAN (e.g., ABCDE1234F).

Click Submit or Send OTP.

Step 4: Verify your identity via OTP

Zerodha sends a one-time password (OTP) to the mobile number registered with your account. The OTP is valid for approximately 10 minutes. Check for the SMS from ZERODHA or ZERODH on the registered mobile.

Enter the OTP on the verification screen and click Verify or Confirm.

If you also have your registered email accessible, Zerodha may simultaneously send an email with the OTP or a password-reset link. The mobile OTP and email link are usually independent; either one can be used.

Step 5: Set a new password

After OTP verification, you are presented with a form to create a new password. Zerodha’s password requirements (as of 2025):

  • Minimum 8 characters.
  • At least one uppercase letter.
  • At least one lowercase letter.
  • At least one digit.
  • At least one special character (e.g., !, @, #, $).

Enter the new password in the New Password field, re-enter it in the Confirm Password field, and click Submit or Reset Password.

Step 6: Log in with the new password

Return to the Kite login screen. Enter your client ID and the new password. Complete the two-factor authentication step (TOTP from your authenticator app or SMS OTP on your registered mobile). If you are not prompted for 2FA, check the 2FA settings guide for Zerodha.

Troubleshooting

OTP not received on the registered mobile

Wait 2 to 3 minutes. SMS delivery depends on the carrier and time of day. Promotional or transactional SMS messages can be delayed.

Check the DND (Do Not Disturb) status. If your number is registered on the TRAI DND list for transactional messages, some carriers may filter OTP SMSs. Contact your carrier to ensure transactional SMS delivery is enabled.

Check the registered mobile number. You can verify the mobile number registered with Zerodha by logging in to Console on a device where you are still logged in, or by checking the account-opening confirmation email from Zerodha.

Request a resend. The password reset page typically shows a Resend OTP option after 60 seconds.

Account appears locked after multiple failed password attempts

Zerodha’s system may temporarily lock login attempts after several consecutive incorrect password entries. The lock is usually lifted after 30 minutes. If the account remains locked after 30 minutes, contact Zerodha support.

Registered mobile number is no longer accessible

If you do not have access to the mobile number registered with Zerodha (SIM card lost, number changed), the self-service OTP-based reset cannot proceed. You must:

  1. Contact Zerodha support and request a mobile number update or an alternative identity verification.
  2. Zerodha may ask you to submit a signed mobile-number change request along with identity documents (PAN, Aadhaar). This is processed manually and takes 5 to 7 business days.
  3. Once the mobile number is updated in Zerodha’s records, you can proceed with the self-service password reset.

New password not accepted

Ensure the password meets all the requirements listed in Step 5. Avoid using passwords that are identical to the previous password (Zerodha may enforce a password history restriction). Also avoid common passwords flagged by the system as weak.

What can go wrong

Logged in on another device after reset. After a successful password reset, any existing login sessions on other devices (browser, mobile app) may be automatically invalidated. You will need to log in again on each device using the new password.

Password reset link in email has expired. If Zerodha sends a reset link (in addition to or instead of an OTP), the link is typically valid for 30 minutes. If it has expired, initiate the reset process again from the login page.

Escalation path

  1. Zerodha support chat or ticket at support.zerodha.com.
  2. Zerodha helpline: +91-80-4040-2020.
  3. If account security has been compromised (suspected unauthorised access), also contact Zerodha support to freeze the account immediately and change your password.

References

  1. Zerodha Support, “I forgot my Kite password, how to reset it,” support.zerodha.com.
  2. Zerodha Z-Connect Blog, “Security best practices for your Zerodha account,” zerodha.com/z-connect.
  3. SEBI, “Cybersecurity and cyber resilience framework for stock brokers,” SEBI circular, latest edition.

Reviewed and published by

The WebNotes Editorial Team covers Indian capital markets, payments infrastructure and retail investor procedures. Every article is fact-checked against primary sources, principally SEBI circulars and master directions, NPCI specifications and the official support documentation published by the intermediary in question. Drafts go through a second-pair-of-eyes review and a separate compliance read before publication, and revisions are tracked against the SEBI and NPCI rule changes referenced in the methodology section.

Last reviewed
Conflicts of interest
WebNotes is independent. No relationship with any broker, registrar or bank named in this article.