> ## Documentation Index
> Fetch the complete documentation index at: https://help-loyalife.xoxoday.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Accessing Loyalife

> Learn how to log in to Loyalife, complete two-factor authentication, and recover account access if you're locked out.

## Logging in

<Steps>
  <Step title="Go to your organization's Loyalife URL">
    Your organization provides a dedicated Loyalife URL. Navigate to it in your browser.
  </Step>

  <Step title="Enter your credentials">
    Enter your username (typically your email address or an assigned username) and password. Use the visibility toggle to confirm your password before submitting.
  </Step>

  <Step title="Complete CAPTCHA (if enabled)">
    If your organization has CAPTCHA enabled, complete the 6-digit challenge. If it is disabled, this step is skipped automatically.
  </Step>

  <Step title="Enter your OTP (if 2FA is enabled)">
    When two-factor authentication is active, Loyalife sends a 6-digit One-Time Password to your registered email with the subject line **"Login OTP - Valid for 60 Seconds"**. Enter it before it expires.
  </Step>
</Steps>

## Two-factor authentication rules

| Rule                    | Detail                                      |
| ----------------------- | ------------------------------------------- |
| OTP validity            | 60 seconds from the time it is sent         |
| Resend limit            | Maximum 5 resend attempts per session       |
| Incorrect entry lockout | Session locks after 5 incorrect OTP entries |

## Inactivity-based password reset

If your account has been inactive beyond the configured threshold (for example, 30 days), Loyalife requires you to reset your password on your next login before granting access. This prevents unauthorized use of dormant accounts.

## Forgot your password?

Click **Forgot Password?** on the login screen. Loyalife sends a reset link to your registered email address. Follow the instructions in that email to set a new password.

## Account lockouts

Accounts can be locked after multiple failed login attempts, or manually by an administrator for security purposes. If your account is locked:

* Contact your Loyalife administrator to have it reactivated.
* A password reset may be required before your next login attempt.

<Warning>
  Loyalife logs all login attempts, password changes, and account status changes in the audit trail. These records are available to administrators for security review.
</Warning>

## LDAP authentication

Organizations using LDAP integrate their existing directory services for centralized authentication. If your organization uses LDAP:

* Your credentials are validated against your organization's LDAP server, not Loyalife directly.
* **Password reset is not available within Loyalife.** Manage your password through your organization's IT tools.
* Some user management features within Loyalife are disabled for LDAP-authenticated accounts.