Password Recovery

The Short Version

• On the login page, there's a "Forgot password?" link that leads to a form where you need to enter your email.
• If an account with that email exists, we'll send you an email with a reset link. The link is valid for 1 hour and can only be used once.
• The link allows you to set a new password. After that, you need to log in again – the reset itself doesn't grant access to the app.
• If you have two-factor authentication (2FA) enabled, it remains active. When logging in after a reset, you'll still need the code from your authenticator app.

---

Step-by-Step

1. On the login page, click "Forgot password?".
2. Enter your email and click "Send link". You'll see a "Check your email" message – this message is the same regardless of the outcome to prevent guessing registered email addresses.
3. Open the email and click the link (it's valid for 1 hour).
4. Enter your new password twice and confirm.
5. Done – return to the login page and sign in with your new password.

Security: What Happens During a Reset

• All active sessions are terminated. Password reset is designed, in part, for cases where an account might have been compromised. Therefore, after changing your password, all devices where you were logged in will be logged out.
• No automatic login. This is intentional: you go through the login process again, which means you'll also go through two-factor verification if it's enabled.

Two-Factor Authentication (2FA) and Password Reset

Password reset does not disable 2FA and does not bypass it. If you have an authenticator app connected in your security settings, you will still need a code (or a backup code) upon login after the reset. Keep your app handy. Resetting your password alone does not grant access without the second factor.

If the Link Doesn't Work

The message "Link is invalid or expired" means one of the following:

• More than 1 hour has passed.
• The link has already been used.
• A newer link has been requested (previous ones become invalid).

What to do: Go back to "Forgot password?" and request a new email – you'll receive a fresh link.

I've Lost Access to Both My Password and 2FA

If you've forgotten your password and lost your authenticator app, resetting your password is not enough to log in (the second factor is still required). In this case, you'll need your 2FA backup codes that you saved when setting it up, or you'll need to contact support.

---