Check who is asking first. A reset lets anyone who knows the password into the account. Confirm the request through a channel you trust, such as a video call or in person. A reply to an email that may itself be part of an attack is not enough.
| Can reset | |
|---|---|
| Company owner | Anyone in the company who belongs to no other company. Not themselves. |
| Company admins | Nobody. They see who has two-factor authentication, but no Reset button. |
| Shorter Loop support | Anyone, after checking who they are. See Shorter Loop support. |


| Message | Meaning |
|---|---|
| Only the company owner can reset someone's two-factor authentication. | You are an admin, not the owner. |
| This person also belongs to other companies, so only Shorter Loop support can reset their two-factor authentication. | See below. |