Can't Log In to Zendesk? How to Fix Every Sign-In Problem (2026)

If you can't log in to Zendesk, first check that you are on your own account's address (https://yoursubdomain.zendesk.com), then reset your password at /access/help, and if single sign-on is the problem, sign in directly at /access/normal. Those three steps fix most lockouts in a couple of minutes. The rest come down to a lost 2FA device, a suspended user, or a browser problem, and each has a documented fix in Zendesk's Help Center, linked below.

Are you on the right Zendesk login page?

Before you touch your password, rule out the most common reason people "can't log in to Zendesk": they're typing the wrong address or signing in as the wrong type of user.

Zendesk doesn't have one universal login box. Your account lives at its own subdomain, the part of the URL before .zendesk.com. In https://acme.zendesk.com, the subdomain is acme (Zendesk help). If you go to a generic page or guess the wrong subdomain, your credentials will never work no matter how many times you retype them.

If you don't know your subdomain, you don't have to guess. Go to the Zendesk login reminder tool, enter the email address you sign in with, and Zendesk emails you the list of subdomains tied to that address (Zendesk help). Check spam if it doesn't arrive in a minute or two.

Agent vs. end-user sign-in (this trips up a lot of people)

Zendesk treats your support staff and your customers as two different kinds of users, and they sign in to different places:

• Agents and admins sign in to the Agent Workspace and Admin Center at https://yoursubdomain.zendesk.com/agent (Admin Center lives at /admin/home). On the sign-in screen, Zendesk asks you to select I am an Agent.
• End users (your customers) sign in to your help center, which is often host-mapped to a custom domain like help.yourcompany.com.

If you're a support agent trying to sign in through the customer-facing help center, or a customer trying to reach the agent dashboard, you'll get rejected even with valid credentials. Make sure you're on the right door before troubleshooting anything else.

On the mobile app? The Zendesk Support app asks for your domain/subdomain first. Enter just the subdomain (or the full yoursubdomain.zendesk.com), then your credentials (Zendesk help).

How do you reset a Zendesk password?

If you're on the right page and the password is simply wrong, reset it. Zendesk has a dedicated reset URL:

1. Go to https://yoursubdomain.zendesk.com/access/help (swap in your real subdomain).
2. Enter the email address you use to sign in and click Submit.
3. Open the inbox for that address and follow the instructions in the reset email (Zendesk help). Zendesk sends two notification emails with different branding, so don't be thrown by the second one.

A few things quietly break this step:

• No email arrives. Check spam, and confirm you typed the exact address your account uses. A personal alias won't match a work account.
• The reset link does nothing. That usually means password sign-in is turned off for your account and your admin requires SSO instead. Zendesk's reset steps apply only to accounts that use standard authentication. See the SSO section below.
• Your password stopped working in late August 2026. Zendesk removed the legacy Low, Medium and High password security levels on 17 August 2026, and accounts that used them need a password reset to match the new settings (Zendesk help).
• You're an end user. Customers reset via the same /access/help page for your account, but if your help center only allows SSO or social login, there may be no password to reset at all.

What do you do when Google, Microsoft or SSO sign-in fails?

Many teams sign in to Zendesk through single sign-on instead of a Zendesk password. Zendesk supports social and business SSO: agents and admins can use Google and Microsoft (Microsoft Entra ID and Office 365), while end users can use Facebook, Google or Microsoft accounts (Zendesk help). One catch for customers: end users can only use Microsoft SSO with a personal Microsoft account, so a work Entra ID identity won't authenticate on the help center. When SSO breaks, it's usually one of these:

• Wrong Google or Microsoft account. If you're signed in to a personal Google account in the same browser, the "Sign in with Google" button may pass the wrong identity. Sign out of the other account, or use a private window with only the work account.
• Email mismatch. SSO matches you by email address. If your company changed your email domain, or IT renamed your account, your SSO identity may no longer line up with your Zendesk profile, which silently blocks login (Zendesk help).
• Your SAML/SSO provider is down. If your identity provider (Okta, Entra ID and so on) has an outage, no one gets in through the normal flow.

The SSO backdoor: /access/normal

When SSO is the only method enabled and it stops working, Zendesk keeps a native-authentication backdoor. Browse to:

https://yoursubdomain.zendesk.com/access/normal

This forces the standard Zendesk email and password sign-in instead of redirecting you to SSO (Zendesk help). It only helps if you actually have a Zendesk password set. Zendesk also notes that it won't show the option to get a new password until you've tried to sign in at least once.

SSO bypass (one-time access link) for owners and admins

If Zendesk passwords are turned off entirely and SSO is down, the account owner (and all admins, if the owner has allowed it) can use SSO bypass to request a one-time access link by email (Zendesk help). The owner sets who can use it in Admin Center under Account > Security > Advanced, on the Authentication tab. Zendesk says it can't turn off SSO for you to help you regain access, so make sure your account owner knows bypass exists before you need it.

How do you get past a 2FA or verification code prompt?

If you've got the password right but the passcode step is blocking you, the fix depends on which prompt you're seeing and what you've lost. Zendesk runs two different checks: two-factor authentication (2FA), with codes from an authenticator app or SMS, and, when 2FA is off, two-step verification (2SV), which emails a 6-digit code when you sign in from an unrecognized device (Zendesk help).

• New phone or lost authenticator app. Use one of your recovery codes instead of the app code. Zendesk shows these codes once, when you set up 2FA, so search your inbox, password manager or notes for where you saved them (Zendesk help).
• At the passcode prompt, type a recovery code in place of the app code to get in.
• The 2SV email never arrives. It goes to the primary email on your Zendesk profile, with the subject "<brandname> verification passcode". Codes expire after ten minutes and work once (Zendesk help).
• Too many attempts. Zendesk allows five login attempts within ten minutes before locking you out, so stop guessing and wait.
• No recovery codes left. Team members can't generate recovery codes for themselves. An admin or the account owner has to create one for you (see the admin section below).

Once you're back in, save a new set of recovery codes, ideally in a shared, secured vault, so a lost phone never locks out a whole shift.

What if your account is suspended or your role changed?

Sometimes the credentials are perfect and you still can't get in, because the account itself has been changed.

• You've been suspended. A suspended user can't sign in or create new tickets through any channel, including the API, and Zendesk doesn't notify people that they were suspended (Zendesk help). End users can also be suspended from messaging only; agents can only be suspended from all channels. If you suspect this, ask your Zendesk admin to unsuspend you, which restores your previous sign-in and access (Zendesk help).
• You can sign in but can't see agent tools. That's a role problem, not a login problem. If you were downgraded from an agent to an end user (or your seat was removed), you'll land in the help center instead of the Agent Workspace. An admin needs to restore your agent role.
• Whole-account billing lapse. If the Zendesk subscription itself is suspended for non-payment, the account owner needs to resolve billing before anyone can sign in.

Could the browser be the problem?

If nothing above applies, the problem may be the browser, not Zendesk. Zendesk's own troubleshooting steps start with the first two below:

• Clear cache and cookies, then try /access/normal again. Stale session cookies are a classic cause of redirect loops and stuck sign-in pages.
• Open a private or incognito window. That also switches off extensions (ad blockers, script blockers, password managers) that can interfere with the login or SSO redirect.
• Try a different browser or device to see whether it's machine-specific.
• Check the clock. Authenticator codes are time-based, so a device clock that has drifted will reject every code. Turn on automatic date and time.
• Confirm Zendesk isn't down. Glance at Zendesk's status page before assuming the problem is on your end.

How does an admin get a locked-out agent back in?

If you're the admin or account owner, here's how to get a teammate back in:

• Generate a recovery code for a passcode-locked agent. In Admin Center, click People in the sidebar, then Team > Team members. Click the team member's name, open the Account tab, click Show recovery code, and share the code with them securely (Zendesk help). The same fix works for 2FA and 2SV lockouts. For wider 2FA settings, see managing two-factor authentication.
• Unsuspend a user who was suspended in error to restore their access (Zendesk help).
• Restore an agent's role if they were downgraded, and confirm they still hold a seat.
• Use SSO bypass to email yourself a one-time access link when an SSO outage has locked out the whole team (Zendesk help).
• Check security settings if several people suddenly can't log in. A recently changed authentication or password policy, including the August 2026 removal of legacy password levels, is a common culprit.

One related note for admins: if your login problems trace back to a confusing or recently changed account URL, our guide on changing your Zendesk subdomain without losing data walks through doing it safely.

Frequently asked questions

What's my Zendesk login URL?

Your account lives at https://yoursubdomain.zendesk.com. Agents and admins sign in at /agent; end users sign in through your help center (often a custom domain like help.yourcompany.com). If you don't know your subdomain, use Zendesk's login reminder tool to have it emailed to you (source).

How do I reset my Zendesk password?

Go to https://yoursubdomain.zendesk.com/access/help, enter your sign-in email, click Submit, and follow the reset link in the email (source). If nothing happens, your account may require SSO instead of a password.

My SSO is down. How do I get into Zendesk?

Try the native sign-in at https://yoursubdomain.zendesk.com/access/normal if you have a Zendesk password. If passwords are turned off, the account owner (or all admins, if the owner allows it) can use SSO bypass to email a one-time access link (source).

I lost my 2FA device. How do I sign in?

Enter one of your recovery codes in place of the app code. Recovery codes are shown only once, at setup. If you've run out, ask an admin or the account owner to generate a new recovery code for you (source).

Why does Zendesk say my account is suspended?

A suspended user can't sign in or create new tickets through any channel, including the API, and isn't notified. Contact your Zendesk admin to be unsuspended, which restores your previous access (source).

Can I log in but only see the help center, not the agent dashboard?

Yes, and that's a role issue, not a login failure. You've likely been set to (or downgraded to) an end user. An admin needs to restore your agent role and confirm you have a seat.

How do you stop the next lockout?

Two habits prevent most repeat lockouts: save your 2FA recovery codes somewhere shared and secure, and make sure your account owner knows SSO bypass exists and who is allowed to use it before an outage hits. If you're an admin, check whether anyone still needs to reset a password after the 17 August 2026 change to password security settings.

Once you're back in, the real work is the queue waiting on the other side. If your team spends its day answering the same repetitive Zendesk tickets, Macha is an AI agent layer that sits on top of Zendesk. It doesn't replace your help desk or your login; it resolves and drafts the routine tickets so your agents handle the ones that need a human. There's a free trial with $50 of usage, no credit card and no time limit. But for getting back into Zendesk, the steps above are all you need.

Login screens and Admin Center menus change between Zendesk releases. If a path here looks different on your account, confirm against the linked Zendesk Help Center article. Steps checked against Zendesk's Help Center on 24 September 2026.