2 weeks ago I tried to login to my selfhosted Matomo. For some reason it didn’t work. I tried requesting new password but a mail is never sent even mails are fully functional on that domain and manually sending mails from and to the same addresses work.
Every login attempt ends up in the brute force table.
After 2 weeks I still can’t login.
v 5.6.2
And to slow things really down I get this: Error: You requested too many password resets recently. A new request can be made in one hour. Your administrator can help you if that doesn’t work.
That brute force table lockout is what is blocking you now. Every failed login adds an entry, and once enough pile up Matomo blocks your IP, which also explains the password reset error you are seeing. If you have database access, clearing the brute_force_log table (or asking your host to do it) usually unlocks the account right away. For the missing reset emails, Matomo uses plain PHP mail or your server’s SMTP settings, so it can fail silently even when your domain mail works fine elsewhere. The most reliable workaround I have seen is resetting the password directly in the database via the users table, or running the console user management command with the overwrite flag if you have SSH access. Worth checking the web server error logs too, they often point at the underlying mail or session issue.