Reset it by email
- Ask for a link
On your admin sign-in page (
/admin/), press Forgot password? and enter the email you sign in with. - Open the email
The page answers the same way for any address, so it can't be used to find out who your admins are. If the address belongs to an active admin, a link is on its way. Check your spam folder too.
- Choose a new password
The link works once, for 30 minutes. Choosing a new password signs you out on every other device.
Password-reset emails go out even while Enable sending is switched off in Settings Email (SMTP).
If no email arrives
| What you see | What to do |
|---|---|
| "Reset emails can't be sent yet" | Your store has no Site URL, so no reset email is sent to anyone. Whoever runs the server sets it from the site folder with php bin/set-site-url.php https://your-store.example, then you ask for a new link. See If you can't sign in to change it. |
| "Email delivery is having problems" | Recent emails from your store have been failing. Whoever looks after your email settings needs to check them. See Customers don't get emails. |
| "That link no longer works" | It was used already, or the 30 minutes passed. Ask for a new one. |
| Nothing, and no message | Check that you typed the email your admin account uses, and look in spam. Asking many times in a row is limited too: wait 15 minutes before trying again. |
If another Administrator can still sign in, they can fix the email settings and Site URL for you.
When sign-in is paused
After 5 wrong passwords for one email from one connection in 15 minutes, sign-in pauses and the page says for how many minutes. You can wait, or press Reset your password now. Resetting doesn't count against sign-in, so it never locks you out.
"This admin account is paused" means the account itself has been switched off. Ask the store owner to turn it back on.
Lost your two-step sign-in device
If your store has the Two-Factor add-on and you've lost your authenticator and backup codes, whoever has shell access to the server can turn two-step sign-in off for your account, from the site folder:
php bin/two-factor-reset.php --admin=<admin id>The admin id is the account's number in the database's admin table. You then sign in with your password and can set up two-step sign-in again. The change is recorded in the Admin Log.
Something wrong or unclear on this page? Tell us at [email protected], or see how to get help.