how-to · company Open this in the console

Reset a lost authenticator.

Settings › users. Reset MFA is on a row that already has an authenticator. It is not on your own row.

The code they scan next is on their own screen. This page does not show it. Whether 2FA is required stays as it was.

Open Settings › users

Pat's MFA column says on. Reset MFA is on that row. Alex is the signed-in company admin, so that row has no reset button. Require an authenticator for a person is the other control on the row, and it is a different decision.

Users table with MFA on for Pat and a reset MFA button — Pat has an authenticator. Reset MFA has not been pressed.

Press once to arm it

The label turns into confirm: clear their authenticator. Press it again to clear it. Their sessions are signed out. The next sign-in enrols a new authenticator when 2FA is still required, or lets them in without one when it is not. This shot stops before the second press, so Pat's authenticator is still on.

Users table with the reset MFA button armed, waiting for a second press — Reset MFA is armed. A second press is what clears it. This one was not taken.

Requiring the authenticator in the first place is Require an authenticator for a person. Their own setup is Your account, timezone and sessions. A lost password is Issue a temporary password.