1. Open Zoho's normal sign-in page directly and enter your account identity. At the verification challenge, inspect the available recovery or alternative-verification options.
2. Use a previously enrolled backup method or recovery code that you control. Follow Zoho OneAuth's recovery instructions if the authenticator is unavailable or trapped in a sign-in loop.
3. If no enrolled method works, contact your organisation's authorised administrator. State whether the missing factor is OneAuth, another authenticator, a security key or a recovery phone.
4. The administrator should follow the applicable Zoho account and organisation recovery controls after verifying your identity. Super Admin recovery may require Zoho's separate ownership process.

Enrol a replacement factor, remove the lost device's access and review active sessions. Generate or update backup recovery material where offered, then store it separately from the device it protects. Test a sign-in from a separate browser before closing your last working session.

Repeated password resets do not replace a missing second factor. Creating a new personal Zoho account with a similar name does not recover the organisation mailbox. A support agent should never need you to send a live approval code or approve a sign-in you did not initiate.

For recovery assisted by our team, provide the service reference, organisation domain and affected account. Use the verified account contact process for ownership checks. If the phone was stolen or the account behaved unexpectedly, review forwarding, delegates and application access after recovery, rather than stopping as soon as login succeeds.

• Securing Zoho Mail and connecting email clients
• Resetting a Zoho Mail user's password safely
• Assigning administrator roles in Zoho Mail
• Investigating mailbox changes with Zoho Mail audit records

• Zoho: Two Factor Authentication
• Zoho Help: Stuck In A Loop Oneauth Asks For Sign In Approval From Oneauth Itself 27 4 2024 1
• Zoho Help: Reset Account Password