Password recovery

Select Forgot password? on the console sign-in page and enter your account email. If the address belongs to an active account, Meshanics sends a single-use link through its transactional email provider. The link expires after 30 minutes.

The request page always shows the same result whether or not the address exists. This prevents the recovery form from being used to discover customer accounts.

Accounts with two-factor authentication

Opening the email link proves access to the account mailbox. It does not remove the account's second factor.

If an authenticator app is enrolled, enter either:

• the current six-digit authenticator code, or
• one unused recovery code saved during authenticator setup

A recovery code can be used once. The password-reset flow does not display, replace, or disable the existing authenticator secret.

If neither code is available

Contact your organization administrator or Meshanics support. An authorized administrator can use the audited MFA-reset procedure and require a new authenticator setup at the next sign-in. Never send an authenticator setup key, current code, or recovery code to support.

What happens after reset

The browser challenge expires after 15 minutes and can change the password only once. Completing recovery returns you to the normal sign-in page. It does not create a console session.

Users who have not enrolled an authenticator can set a new password after the email check, but must still complete authenticator setup before receiving a console session.

Related: Authenticator app sign-in