# Accounts and access

Answers the question: What do you do when an administrator loses the password or the phone with the second factor?

## Accounts

The Users section creates console accounts. An administrator handles everything; a viewer only looks.

The server chooses the password of a new account and shows it once. At the first sign-in the owner sets their own.

![Users](https://docs.wyrd.link/assets/img/en/console-users.png)

## The second factor

The second factor is turned on from the account menu: an authenticator app reads the QR code, and the same secret sits beside it as a string. The factor goes on once the app has confirmed a code.

The sign-in form always has the code field. Without a second factor, leave it empty.

Your own factor is turned off in the same place, and that asks for a current code.

## The phone with the second factor is gone

If the phone with the second factor is lost, another administrator takes the factor off with the button in that person's row.

## The password is gone

A lost password is reset only on the machine the Wyrd server runs on. If we host the server, support does it – write to them from the cabinet.

On a server installed on your side, run:

```
sudo systemctl stop wyrd
sudo -u wyrd wyrd -c /etc/wyrd/wyrd.toml --reset-password admin
sudo systemctl start wyrd
```

The command prints a new password once, turns the second factor off, closes that account's open sessions and requires a new password at the next sign-in.