Sign-in and two-factor problems
On this page
The sign-in page does nothing#
Sign-in needs JavaScript. Turn it on for the site, or use another browser.
Wrong password#
Too many wrong attempts slow you down. The product treats unknown and known email addresses alike, so it will not tell you whether an address has an account.
Forgot your password#
Use Forgot your password? on the sign-in page. Enter your email. The answer is always the same, whether or not the address has an account. If an account exists, you get a link by email.
The reset link works once and is valid for one hour. Choosing a new password signs you out everywhere. It does not skip two-factor sign-in.
The link says it is invalid or already used#
Ask for a new link. The page has a form for that. Links are one-time. Opening a link twice, or opening an old one, fails.
The password step timed out#
After you confirm your email you have 30 minutes to choose a password. If it ran out, use the forgot-password page.
Two-factor codes are refused#
The code comes from an authenticator app and changes every 30 seconds. The clock on your phone must be right. Codes from one step before or after are accepted.
You lost your authenticator#
Use one of your 10 recovery codes. Each works once. After you sign in, set up your authenticator again and make new recovery codes.
You lost the recovery codes as well#
Recovery is meant to be done by our staff after an identity check. The owner approved this approach on 2026-10-28. The exact steps and the support address are OPEN. Contact support. Never send a password or a code.
Signed out unexpectedly#
Sessions end after 30 minutes without activity and after 8 hours in total.
Owners and admins see "forbidden"#
Two-factor sign-in is required for owners and admins. Until you set it up, the dashboard pages refuse you.