Recovering your forgotten SamBooks password

Can't log in because you don't remember your password? Here's the actual step-by-step path: from the link on the login page to your new password, including what happens if you have a passkey or an authenticator app.

What it's for

Every SamBooks account always has a base password, set when you register — even if you usually log in with a passkey afterwards. If you don't remember it, the login page has a dedicated recovery path: request a link by email, open it, and choose a new one. This guide only covers recovery: to set up a passkey or an authenticator app, which make signing in faster or more secure but don't replace this path, see Protecting your account with a passkey and an authenticator app.

Before you start

• You need access to the email inbox you registered with: that's where the link is sent.
• The link you receive expires after one hour.
• No special role is needed: anyone with a SamBooks account can recover their own password on their own, without involving a Manager or a company administrator.

Step by step

1. Open "Forgot password?" on the login page

On the login page, right below the password field, you'll find the "Forgot password?" link. Click it: it takes you to a dedicated page where you enter your email.

2. Enter your email and submit the request

Type the address you registered with and press "Send reset link". The response is always the same, whether or not that address actually exists: "If the email exists, you'll receive a link to reset your password." That's not a bug or an imprecision — it's deliberate, so that anyone guessing addresses at random can't tell which accounts really exist on SamBooks. You can send at most 3 requests per minute from the same IP address; beyond that, wait a moment and try again.

3. Open the email and click "Reset password"

SamBooks emails are written in Italian whatever language you use the app in, so look for the subject "SamBooks — Reimposta la tua password" (reset your password). The body reads "abbiamo ricevuto una richiesta di reimpostazione della password per il tuo account SamBooks. Scegline una nuova con il pulsante qui sotto." — we received a reset request; choose a new password with the button below. The button says "Reimposta la password". Under it comes the line that matters most: "Il link scade tra 1 ora. Se non hai richiesto tu il reset, ignora questa email: la tua password resta invariata." — the link expires in one hour, and if it wasn't you, there is nothing to do.

4. Choose your new password

The link opens the "Reset password" page, with "New password" and "Confirm password" fields and a "Reset password" button. The password needs to be at least 8 characters: below that, you'll read "Password must be at least 8 characters"; if the two fields don't match, "Passwords do not match". If you open the page without the token in the address — by mis-pasting the link, say — the button simply stays greyed out and nothing is submitted; if the token is there but no longer good, the error comes back on submit: "Token non valido" (invalid token).

5. Go back to the login page and sign in with the new password

Once the reset succeeds, you're taken back to the login page: there's no on-screen confirmation banner today, but if you got this far your password has already been changed — sign in as usual with your email and the new password.

If you do remember it and just want to change it

The path above is for people locked out. If you're already inside SamBooks, you change your password without going through email: from your name in the top right open User settings → Profile, where you'll find the Password card — "Change your account password. You will be asked for the current one."

Fill in Current password, New password and Confirm new password, then press "Change password": you'll read "Password updated." Get the current one wrong and the field turns red with "The current password is not correct."; the new one needs at least 8 characters.

Two consequences worth knowing before you press it: this change also signs you out of every device, the one you're on included (you sign straight back in with the new password); and any reset link you had requested shortly before stops working, because it's only valid until the password changes.

What happens to your sessions

Resetting your password signs you out of every device you were logged in on — not just the one you're using right now. That's intentional: a password reset is the classic case of a compromised account ("I can't log in anymore" can mean someone else changed the access), and without this automatic sign-out, an intruder would stay logged in despite the password change.

If you have a passkey or an authenticator app

• Passkey. It's a credential independent from your password: it's always added to an account that already has a base password, never truly replaces it. Resetting your password doesn't touch your passkeys: they stay valid, and if you've already registered one you can keep signing in with "Sign in with passkey" on the login page, without ever using the new password.
• Authenticator app (TOTP) and backup codes. Today they don't come into play at login in any case — neither before nor after a reset: you always sign in with email and password, or with a passkey. If you've set them up, a password reset doesn't touch them and doesn't require reconfiguring them.

If something's not working

• "Invalid token." Shows up for a link that's expired (past one hour), already used once, or incomplete: the message doesn't distinguish the cause. Either way, go back to "Forgot password?" and request a new one.
• No email arrives. Check your spam folder. Remember the response to the request is always "If the email exists, you'll receive a link" even when you typed the wrong address: double-check you entered exactly the email you registered with.
• Too many requests in a short time. The limit is 3 requests per minute from the same IP address: wait and try again.
• I was invited to a company but never finished signing up. Until you accept the invitation and create your account, that address doesn't exist for SamBooks yet: the on-screen message still says "If the email exists…" but no email goes out. Reopen the invitation link you received and finish registering.
• My account has been deactivated. No recovery link is sent for a deactivated account, and the on-screen response is the same as always: write to support.
• I have a passkey and would rather not reset my password. You don't need to: on the login page, use "Sign in with passkey" instead of "Forgot password?".

Frequently asked questions

I don't remember my password and I don't have a passkey — how do I log in? Use "Forgot password?" on the login page: enter your email, open the link you receive — valid for one hour — and choose a new password.

How long does the link in the email last? One hour from when it's sent. If it expires, go back to "Forgot password?" and request a new one.

Does resetting my password delete my passkey? No: passkeys and passwords are independent credentials. Your passkey stays registered and usable.

Do I also need to reconfigure my authenticator app after the reset? No: today the authenticator app (TOTP) doesn't come into play at login either way, before or after a password reset.

How many times can I request a reset? Up to 3 requests per minute from the same IP address; beyond that limit, wait a moment and try again.

I just want to change my password, I haven't forgotten it — how? From inside SamBooks: top-right menu → User settings → Profile, the Password card. It asks for your current password, and the change signs you out of every device.

Am I signed out of my other devices after the reset? Yes, from all of them: it's an automatic security measure, meant for the case where someone else had access to your account.

Related guides

• Protecting your account with a passkey and an authenticator app — set up a passkey to sign in without ever typing your password.
• Signing in and quick login in SamBooks.