Hi - I have a user who last logged on in early July and doesn't remember their password.
I have sent them a password reset email but then they get the message below, but they don't get an email or SMS to the number on their profile with the verification code. When they used Authenticator they were asked for the two-word key.
What should they be doing to get back on to the system?
If your org has 'Administrators Can Log In as Any User' enabled, go to Setup β Users, click the Login link next to this user. This impersonates them from your already-authenticated admin session and does not trigger the identity verification challenge, since it isn't a fresh username/password login. Once in, you (or they, on a screen-share) can fix the email/phone directly.
Once you're in (via Login As) , go to their user detail page and remove/reset any misconfigured Salesforce Authenticator connection or verified mobile number, so they can re-register a method that actually works for them going forward.