Login and password reset
Recovering an account, resetting a password and unlocking a staff PIN.
"It is asking me for a code"
That is expected. Email two-factor is on by default, so after your password is accepted a six-digit code is emailed to you. It lasts 10 minutes and you get five attempts; requesting a new one cancels the old one, so use the latest email. Tick Trust this device for 30 days to stop being asked on that browser. See Two-factor authentication.
If the code never arrives: check junk mail first, then have an admin confirm the email address on your staff record — an address that has bounced repeatedly is suppressed and cannot receive codes. An admin can also switch two-factor off for one person in Settings → Staff, unless the company requires it.
Forgotten password
Use the forgot-password link. Resetting clears any temporary-password flag on the account, so a reset also recovers an account that has been locked out by an expired temporary password.
"Your temporary password has expired"
A password issued to you by an admin is temporary. Before it expires you are forced to change it at login; after it expires, sign-in is refused. The fix is either a new password from your admin, or the forgot-password flow.
Too many attempts
Sign-in, password reset and PIN verification allow 10 attempts per 15 minutes; signup is tighter at 5 per IP address. Repeated failures make you wait rather than locking the account permanently.
Forgotten PIN
The PIN prompt offers a password fallback, so you can authorise the action with your account password instead. See Staff PIN gate.