If a user cannot sign in to Spendesk because they’ve lost access to their authentication methods, an Account Owner (AO) or Administrator can generate a recovery code to restore access.
Access the user's profile
Click on Settings;
Then select Organisation;
Open the blocked user's Profile, then on Edit member’s profile;
Go to the Security tab;
Then click on Generate a recovery code.
A warning will ask you to confirm the requester’s identity. If phishing is suspected, consider the account compromised and treat any requests from their email or other channels as possibly from an attacker.
Important: Verify the requester’s identity before taking any action.
Step-by-step guide
If you’re sure of the requester’s identity, click I confirm.
Choose how to share the recovery code:
Manual sharing: If you have any doubt about the requester’s identity, choose Manual sharing and share the code via a different channel from the one they used to contact you.
Email delivery: If you’re confident in their identity, choose Email delivery.
Verify your own identity when prompted (you’ll be asked to authenticate).
Share the recovery code:
Manual sharing: The code is displayed. Share it with the blocked user.
Email delivery: The code is sent automatically to the blocked user by email.