...
If you have access to add additional Staff, you can set up Two-Factor Authentication at account creation under [Settings] > [System Settings] > Staff.
Resetting a Password
Clients and Staff members may request to reset their password from their respective log in screens by clicking the Reset Password link. Users are then asked to enter their username, and, if a match is found, an email with a temporarily link is sent to the address on file. Clicking the link will take the user to a page that will allow them to enter a new password.
By default Blesta will display a success message for all reset requests, regardless of whether or not a match is found. This is a security measure designed not to reveal information about users that may or may not exist within the system. You can disable this feature by modifying the Blesta.default_password_reset_value Configuration Files value.
The length of time that the reset password link is active for is controlled by the Blesta.reset_password_ttl Configuration value.
Logging in From Another Page as a Client
...