diff --git a/sourcing/cli.py b/sourcing/cli.py
new file mode 100644
index 0000000..43886fd
--- /dev/null
+++ b/sourcing/cli.py
@@ -0,0 +1,13 @@
+from . import create_app, model, database
+import click
+
+app = create_app('config.default')
+
+@app.cli.command()
+@click.argument('user_or_email')
+@click.option('--password', prompt=True, hide_input=True)
+def reset_password(user_or_email, password):
+    user = model.User.lookup_user_or_email(user_or_email)
+    user.set_password(password)
+    database.session.commit()
+    print(f'password updated for {user.username} ({user.email})')