Resetting a Forgotten Password

If you've forgotten your password, you can reset it from the login screen.

1. Click Forgot your password? on the login screen, which takes you to the /forgot-password page.
2. Enter the email address you signed up with and request a reset link. (A reCAPTCHA check runs alongside this for security.)
3. Click the link you receive by email, which takes you to the /reset-password page, where you can set a new password.
4. If the email doesn't arrive, check your spam folder. If it's still not there, you may have a typo in your email address on file — contact support.

Example: If you request a reset at 2pm but don't click the emailed link until 6pm that evening, more than an hour has passed and the link has already expired. You'll see an "This link has expired" message and be sent back to request a new one. Don't worry — just go to /forgot-password again, request a fresh link, and click it within the hour to set your new password.

Good to know

• The reset link expires: The link (token) you receive by email is single-use and expires after one hour. If you follow an expired or already-used link, you'll be prompted to request a new one. For example, if you've already used the link once to set a new password and later click the same link again by mistake, it won't work a second time because the token has already been consumed.
• Repeated request limit: If you request another reset for the same account within 60 seconds, no additional email is sent (this prevents spam). For instance, if the email seems slow to arrive and you click "Request reset" three times in quick succession, only the first request actually sends an email — the other two are ignored. Wait a moment and try again.
• Two-factor authentication (2FA) is not bypassed: Resetting your password does not change your 2FA setup. If you have 2FA enabled, you'll still be asked for your OTP code as usual the next time you log in after resetting your password. In other words, a password reset alone cannot be used to bypass 2FA and access your account. If you've also lost the phone with your authenticator app on it, you'll need your 2FA recovery code — separate from the password reset — to sign back in.