How to Unlock a CAC: Official PIN Reset Options (2026)

If your CAC stopped working, first determine whether the PIN is actually locked. A reader, certificate, browser, middleware, or account problem can look similar but requires a different fix.

Quick decision guide

1. You saw a clear blocked or locked PIN message: stop entering PINs. Locate a RAPIDS site or ask your organization whether an authorized credential PIN-reset workstation is available.
2. The reader does not detect the card: reconnect the reader, try another USB port, and test the card and reader separately if your help desk can assist.
3. The card is detected but a website rejects it: check certificate selection, DoD root certificates, browser support, and whether the destination account is enabled.
4. The card is expired, damaged, lost, or revoked: contact an ID card office or your security office; a PIN reset will not repair the credential.

What an official reset requires

DoD guidance says a forgotten or locked PIN must be reset after ownership is verified against biometrics stored in DEERS. Any RAPIDS site can generally perform that reset. Some organizations also operate Next Generation Credential PIN Reset workstations, but these are staffed trusted-agent stations with specialized equipment—not an at-home or browser-based reset.

Before you travel

Use ID Card Office Online to locate a site, confirm hours and access requirements, and ask whether PIN resets are handled by appointment or walk-in. Bring the CAC and follow the office’s current identity-document instructions. Do not rely on unofficial “PUK,” command-line, or kiosk instructions.

After the reset

Test the CAC on a known supported government system. If the PIN works but one service still fails, the remaining problem is probably certificate selection, account provisioning, middleware, or that service—not the PIN.

Official resources

• DoD: Managing Your Common Access Card
• DMDC ID Card Office Online and RAPIDS Site Locator
• DoD Next Generation Credential PIN Reset requirements

Use the official locator and call the selected office before traveling because local access rules, hours, and appointment practices can change.