Forgotten password

Request a link and set a new password — with the step that comes first when two-factor authentication is on.

The signed-in product speaks German, so its messages are quoted in German below, with the English rendering in italics.

How to set a new password

On the sign-in page choose „Passwort vergessen?“ (Forgotten password?).
Enter the e-mail address and press „Reset-Link senden“ (Send reset link).
Wait for the mail and open the link. It leads to a page with a button — only the click redeems the link.
Enter the new password twice and save.

What happens then

verstag signs you out and says so: „Passwort geändert. Bitte melde dich mit dem neuen Passwort an.“ (Password changed. Please sign in with the new password.) Sign in again with the new password.

The answer after you submit

After you submit, the same sentence always appears — whether or not an account exists for the address:

Falls ein Konto zu dieser Adresse existiert, haben wir einen Link zum Zurücksetzen geschickt. Bitte prüfe dein Postfach, auch den Spam-Ordner. Sollte nach einigen Minuten nichts angekommen sein, versuche es erneut.

If an account exists for this address, we have sent a reset link. Please check your inbox, including the spam folder. If nothing has arrived after a few minutes, try again.

With two-factor authentication on, a step comes first

If an authenticator is set up for the account, the page behind the link is not headed „Neues Passwort setzen“ (Set a new password) but „Bestätigung in zwei Schritten“ (Two-step confirmation):

Für dieses Konto ist die Zwei-Faktor-Authentifizierung aktiv. Bitte bestätige sie einmal, danach kannst du das neue Passwort setzen.

Two-factor authentication is switched on for this account. Please confirm it once; after that you can set the new password.

Enter the code from your authenticator app; the password form appears afterwards.

A recovery code switches two-factor authentication off

If you no longer have access to the authenticator app, a recovery code takes you through. The page says:

Nutze einen Recovery-Code, wenn du keinen Zugriff auf deine Authenticator-App hast. Er deaktiviert die Zwei-Faktor-Authentifizierung; richte sie anschließend in den Account-Einstellungen wieder ein.

Use a recovery code if you have no access to your authenticator app. It switches two-factor authentication off; set it up again afterwards in the account settings.

Once the code is redeemed the account is protected by its password alone. So set two-factor authentication up again in the account settings straight afterwards.

„Der Link ist ungültig oder abgelaufen. Fordere unten einen neuen an.“ (The link is not valid or has expired. Request a new one below.) The reset link is good once and only for a short while: either it is too old, or it has already been redeemed. The form for a new one is directly underneath.

No mail arrives although the confirmation appears. If your account is managed through your company account, „Passwort vergessen“ sends nothing for it. The account settings say so at the place where a password would be set:

Dieses Konto wird über dein Unternehmenskonto verwaltet — ein eigenes Passwort lässt sich dafür nicht festlegen, und „Passwort vergessen“ verschickt dafür keine E-Mail. Die Anmeldung läuft über deinen Identitätsanbieter.

This account is managed through your company account — no password of its own can be set for it, and “forgotten password” sends no e-mail for it. Sign-in goes through your identity provider.

The password does not live at verstag in that case. It is reset where it is managed — at your identity provider.