| Message | What to do |
|---|---|
| Invalid email or password. | Check both. Use Forgot password? if unsure. (It does not say which one is wrong.) |
| Too many attempts. Try again in …s. | You tried too often (5 in 15 minutes). The form counts down; wait, then try once more. |
| Confirm your email first. We sent you a link. | Open the verification email, or press Send the link again. |
| This account is disabled. Contact your admin. | An admin disabled your login. Ask them to enable it on the Users page. |
| This account has been switched off. Contact Postalu support. | Write to support@postalu.com. |
| Postalu team members sign in at /admin/login. | You are Postalu staff: use the staff sign-in. |
| Enter the 6-digit code from your authenticator app. / Invalid code. | Check your phone's clock. Use the next code. Or use a recovery code. |
| Invalid or already-used recovery code. | That code is spent or mistyped. Try another, or ask an admin to reset your 2FA. |
| This reset link isn't valid. Request a new one. / That link is invalid or has expired. | Reset links last 1 hour and verification links 24 hours. Request a new one. |
| Temporary password is incorrect. / Choose a password different from the temporary one. | On a first sign-in, use the temporary password you were given, then pick a new one. |
More on two-factor, recovery codes and passwords.
Read next
- Two-factor sign-in Why every account uses an authenticator app, how to set it up, and what to do if you lose your phone.
- Passwords: rules, changing and resetting What makes an acceptable password, how to change it, and how to reset a forgotten one.
- Recovery codes Ten one-time codes that let you sign in without your phone, and how to replace them.
