AD Toolkit
Reset Active Directory passwords and unlock locked accounts from your iPhone. Built for helpdesks and on-call admins. Open source, self-hosted, and Face ID protected.
Reset Active Directory passwords and unlock locked accounts from your iPhone. Built for helpdesks and on-call admins. Open source, self-hosted, and Face ID protected.
Look up any AD user by username, employee ID, or full name. Multi-result disambiguation when your search hits more than one.
Unlock locked-out accounts instantly. Status refreshes automatically so you know the change took effect.
Generate a strong random password or set a custom one. Result is displayed once, then wiped from memory.
Face ID, Touch ID, or device passcode required on every launch. Re-locks the moment the app backgrounds.
Switch between staging, production, and multiple tenants in one tap. Each profile has its own credentials and token.
Domain Admin accounts automatically have destructive actions hidden. No way to accidentally reset a privileged account.
Tap "Use Demo Server" for a fully interactive walkthrough with seeded users. No backend or credentials required.
Data never touches our servers. Bearer tokens live in the iOS Keychain and never sync to iCloud or device backups.
Search by username, employee ID, or name. Pick from a disambiguation list when your search matches multiple accounts.
Generate a strong random password or set a custom one. The result is displayed once, then discarded.
See enabled status, lockout time, and last logon at a glance. Unlock in one tap. Reset the password without leaving the screen.
The iOS app and the PHP/PowerShell backend are both fully open source. Read the code before deploying it to your domain controllers. Contribute fixes. Adapt it to your environment.
AD Toolkit is live on the App Store. Point it at your backend — or tap "Use Demo Server" and try it right away.