Resetting a forgotten password

2 min read

If you have forgotten your password, you can restore it via email - no support ticket needed.

Procedure

1. On the login page, click "Forgot password?"
2. Enter the email you are registered with
3. You will receive an email with a link (valid for 30 minutes)
4. Click the link, fill in your new password twice, confirm
5. Log in with the new password

Security safeguards

• Rate limit: max 1 email per 5 minutes for the same email (against spamming)
• Generic response: even if the email does not exist, "We have sent an email with instructions" is shown (avoiding user enumeration)
• Token expiry: reset link valid for 30 minutes from generation
• One-time use: after a successful reset, the token is invalidated
• 2FA still applies: a password reset does NOT bypass 2FA. If you have it enabled and also lose 2FA access, contact support at [email protected]

If the email does not arrive

1. Check the spam folder
2. Check that you sent the reset request to the correct email (you may have made a typo)
3. Wait 5 minutes - reset emails go via the Brevo SMTP relay
4. If nothing happens, write to [email protected] from the same email (we will verify your identity)