Account recovery

Reset password

Request a reset link The response does not reveal whether an email address has an account.
Recovery path

Recover access without losing the workflow context.

Request the link, set a new password, and return to sign in. Invalid or expired tokens stay visible as a recoverable state.

Password recovery states covering request, link sent, reset, expired or invalid token, and success.