Signing in and staying signed in
Email + password, optional authenticator step, and what to do if the session dies.
Normal login
Open Log in, enter the same email you used at signup, then your password. If 2FA is on, you will be asked for a 6-digit code from the authenticator app — not an SMS from “support”.
If you land on a code screen
That is the authenticator challenge. Codes rotate every 30 seconds. Use the app you scanned at setup (Google Authenticator, 1Password, Authy, etc.). Backup codes are not emailed by default — if you lost the device, you need Live chat from a recoverable position (see Lost 2FA).
Session
Stay signed in in that browser until you hit Log out in Settings or the nav. Another device does not automatically kick this one unless you change the password.
“Forgot password”
Open Forgot password on the login page. Enter the email on the account. If this exchange has SMTP on in admin, a 6-digit code is mailed there. Enter the code and a new password. If mail is not set up, contact support.