2 min read
How to reset it
- On the sign-in screen, choose Forgotten password.
- Enter your registered email address.
- We email you a secure, time-limited link. Open it.
- Choose a new, strong passphrase you have not used elsewhere.
- Sign in with the new password and confirm your 2FA still works.
Why we do it this way
Sending the link to your registered email proves you control that mailbox, which is a check an impostor cannot easily pass. We never ask for your old password to set a new one, and we never email you a password — anyone who does is not us. The link expires quickly so it cannot be used later if the email is ever exposed.
If the email doesn't arrive
Check your spam or junk folder, confirm you used the email address registered to the account, and allow a couple of minutes. If it still does not come, the address on file may be out of date — see changing your sign-in email, or if you cannot get in at all, follow account recovery.
A reset you didn't request
If you receive a password-reset email you did not ask for, someone may be trying to access your account. Do not click it. Sign in normally if you can, check your sessions, and report it — see reporting suspected fraud.
Frequently asked questions
Will you email me my new password?
Never. We send a secure link so you can set a new password yourself. Any email containing an actual password claiming to be from us is a scam — do not use it.
The reset link says it's expired — why?
Reset links are deliberately short-lived so they cannot be misused later. Simply request a fresh one from the sign-in screen and use it promptly.
I got a reset email I didn't request — should I worry?
Don't click it, but do check your account and sessions and turn on 2FA if it isn't already. An unrequested reset can mean someone is trying your email address.
Related reading
Recovering access if you're locked out
Being locked out is almost always recoverable. Work through it in order: reset your password, use a recovery…
Read →Choosing a strong passphrase for your business account
A passphrase — three or four unrelated words — is both stronger and easier to remember than the old-style…
Read →
Setting up an authenticator app for two-factor authentication
Two-factor authentication adds a second step to sign-in: after your password you enter a six-digit code from…
Read →
Changing your sign-in email address
Your sign-in email is also where resets and alerts go, so keeping it current matters. Changing it is simple,…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.