How-to blocked account account locked password reset dormant account two-factor authentication

How to unblock a blocked Kite account

From WebNotes, a public knowledge base. Last updated . Reading time ~9 min. Level: Beginner.

Kite blocks your account after five incorrect password attempts, and the block clears only when you reset your login credentials; there is no separate unblock button. Completing the Forgot user ID or password flow sets a new password and unblocks the account automatically. The same applies to a block from repeated incorrect two-factor authentication entries. This guide walks the reset-to-unblock flow, and separates it from two states people confuse with a login block: account dormancy, and a risk-management or suspicious-activity freeze, each of which has a different fix.

The first task is to identify which state you are in, because the three have different remedies. A login block from wrong attempts is self-served by a password reset. A dormant account , caused by a long stretch with no trades, is reactivated through a separate route. An RMS or fraud freeze is lifted by Zerodha support after verification. Applying the wrong fix wastes time, so the sections below map each cause to its remedy.

Conflict-of-interest disclosure. This guide is published by the WebNotes Editorial Team for informational purposes and is written independently. WebNotes operates a Zerodha account-opening referral programme, disclosed on the pages that carry the referral link; this guide does not carry it and earns no referral commission from the procedure described here.

Step-by-step procedure

The numbered box at the top gives the sequence. The H3 sections below expand the reset-to-unblock mechanism and the two states that need a different route.

1. Confirm it is a wrong-attempts block

A login block shows up as the inability to log in after several failed attempts, often with the message Invalid account credentials, N attempts remain counting down, and then a blocked state. Kite blocks the account after five incorrect password attempts. Repeated incorrect 2FA entries trigger the same protection; Zerodha also sends a notification when multiple incorrect 2FA entries occur, which is worth reading as a possible unauthorised-access signal. If this is your situation, the reset below is the fix. If you can log in but the account is inactive for trading, you are likely dormant rather than blocked; jump to the dormancy section.

2. Reset the password to unblock

Go to kite.zerodha.com or the Kite app and tap Forgot user ID or password. Enter your User ID and PAN, choose Receive on Email or SMS, enter the captcha, and click Reset. Enter the OTP that arrives on your registered email or mobile, click Continue, then set a new password. Completing this reset unblocks the account automatically. There is nothing else to click and no ticket to raise; the block exists only to stop credential guessing, and a successful credential reset removes its reason. Use the email channel for the OTP if your mobile is on DND or lost. The full reset detail is in how to recover a Kite password .

3. Set the second factor and log in

After the password, set or confirm the second factor, the 6-digit PIN or a TOTP authenticator . Then log in with your user ID, new password, and the PIN or app code within the five-minute window. A clean login confirms the block is cleared. If the reset itself returns Invalid account credentials, N attempts remain, a field in the form is wrong: recheck the user ID, PAN, and the registered email or mobile you entered against the records on file.

When you cannot receive the OTP

The reset depends on an OTP to your registered email or mobile. If your mobile is on the DND registry, the SMS may not arrive; use the email channel. If you have lost access to the registered mobile, the same email route works as long as you can still reach the email; see how to log in when the mobile is lost . If you have lost access to both the registered email and the mobile, you cannot self-serve the reset, and therefore cannot self-unblock. You must update your contact details first, online if your mobile is linked to Aadhaar or offline by form, which Zerodha applies within 72 working hours after verification. Only then can you reset the password and unblock. Read how to recover lost email and mobile for that path.

Dormancy is not a block

A dormant account is a different state from a blocked one. SEBI rules let a broker flag a trading account as dormant or inactive after a defined period with no trades; the threshold is the broker’s stated policy. A dormant account is not unblocked by a password reset, because nothing about the credentials is wrong. It is reactivated through the reactivation route, which may require a fresh verification step. Read how to reactivate a dormant Zerodha account for the procedure, and note that a dormant demat account has its own handling distinct from the trading side. If you are unsure whether you are blocked or dormant, check whether the login itself fails, which points to a block, or whether you can log in but cannot place orders, which points to dormancy or another restriction.

RMS and suspicious-activity freezes

A risk-management (RMS) freeze or a suspicious-activity block is a third state, applied to protect the account rather than to stop credential guessing. An RMS action may restrict trading after a margin or compliance event; read how to fix an RMS rejection at Zerodha for the trading-restriction case. A suspicious-activity freeze, which you can also trigger yourself if you fear your account is compromised, is lifted by Zerodha after verification, not by a password reset. If you suspect unauthorised access, freezing the account and contacting support is the right move; see Zerodha cyber security and how to secure a trading account . For any of these, raise a ticket through how to create a ticket at Zerodha , or without login if you cannot get in.

See also

External references

References

  1. Zerodha support, How to unblock Kite account? (five incorrect password attempts; unblock via password reset, as of 20 June 2026).
  2. Zerodha support, Why was a notification sent for entering multiple incorrect Two Factor Authentication (2FA)? (as of 20 June 2026).
  3. Zerodha support, How can the Zerodha account password be reset without having access to the linked mobile number and email ID? (contact update within 72 working hours, as of 20 June 2026).
  4. SEBI circular SEBI/HO/MIRSD/DOP/P/CIR/2022/76, dated 3 June 2022, on two-factor authentication for online trading account access.

WebNotes Editorial Team prepares factual how-to guides based on publicly available regulatory documents and broker disclosures. WebNotes is not affiliated with Zerodha Broking Limited. Procedures and screens are subject to change; verify the current flow at support.zerodha.com before acting.

Frequently asked questions

Why is my Kite account blocked?
Kite blocks the account after five incorrect password attempts, and also after repeated incorrect two-factor authentication entries. The block is a security measure to stop someone guessing your credentials. It is separate from dormancy and from a risk freeze.
How do I unblock my Kite account?
There is no unblock button. Reset your password through Forgot user ID or password on the login screen, verify by OTP, and set a new password. Completing the reset unblocks the account automatically and you can log in again.
Does resetting my password unblock the account by itself?
Yes, for a wrong-attempts block. Once the password reset completes, the account is automatically unblocked and you can log in with the new password. No separate request to support is needed in this case.
What if I see Invalid account credentials, N attempts remain?
That error means a detail in the reset form is wrong. Check that the user ID, PAN, and the registered email or mobile you entered all match the records on file, then try the reset again.
My account is dormant, not blocked. Is the fix the same?
No. Dormancy from a long period of no trading is a separate state, reactivated through the dormant-account route, not by a password reset. Confirm whether you are blocked or dormant before choosing the fix.
Why was my account frozen for suspicious activity?
A risk-management or fraud freeze is different from a wrong-attempts block. It is applied by Zerodha or by you to protect the account, and it is lifted by support after verification, not by resetting the password.
Can I unblock the account if I have lost my mobile and email?
Not directly. You must update your contact details first, online via your Aadhaar-linked mobile or offline by form, which Zerodha applies within 72 working hours. Then you reset the password, which unblocks the account.

Reviewed and published by

The WebNotes Editorial Team covers Indian capital markets, payments infrastructure and retail investor procedures. Every article is fact-checked against primary sources, principally SEBI circulars and master directions, NPCI specifications and the official support documentation published by the intermediary in question. Drafts go through a second-pair-of-eyes review and a separate compliance read before publication, and revisions are tracked against the SEBI and NPCI rule changes referenced in the methodology section.

Last reviewed
Conflicts of interest
WebNotes is independent. No relationship with any broker, registrar or bank named in this article.