Recovery
Start password recovery.
If email delivery is configured, we will send a reset link. The response stays uniform either way.
Reset links are single-use and expire automatically.
Safety
- Uniform responses reduce account enumeration
- Hashed reset tokens are stored server-side
- Recent reset requests are throttled per IP and account