Sign-In and Password Recovery

Use the supported recovery route and handle missing, expired or unexpected sign-in links safely.

Start from the official recovery page Use Forgot password with the email address associated with your account. Open the recovery email yourself and follow the password update flow. Never send the recovery link, its token or your new password to support or another person. A password recovery request is not an application for an employer role, company membership or administrator privileges. Access still depends on the account and the applicable permissions. Do not use recovery links to try to enter another person's account. When the email is missing Check the address you entered and the mailbox's spam or filtered folders. Avoid sending repeated requests in quick succession. If you have requested several links, use the newest relevant message rather than an older one. For an account normally accessed through a sign in provider, use the provider option you originally used where available. Do not create multiple accounts merely because the original sign in method is temporarily unclear. When a link fails or opens the wrong screen Request a fresh recovery link from the official page. Ensure you have not copied a truncated address from a message preview. Do not edit token parameters or paste the full recovery URL into a public issue. If the password update form is missing, a link has expired or access remains incorrect, report the visible error, browser and approximate request time to support. Describe the route without exposing the token. Successful navigation alone is not proof that your password was updated; complete the actual password form and confirm its result. Other access problems Phone verification and company membership are separate from password recovery. Read phone verification, team invitations and contacting support. An administrator permission error should be reported, not worked around by switching links or changing role fields.