Safe recovery
Reset password
Request a recovery link or finish the reset flow without leaving the public auth lane.
Send a recovery link
We will email a recovery link that returns to this board and keeps your setup context intact.
Recovery completion proof
Recovery trust chain
Password recovery keeps email request, token verification, password update, safe routing, accessibility, and static performance evidence visible in the public auth lane.
- 01Recovery email
POST /auth/v1/recover sends the reset link back to /auth/reset-password without exposing protected workspace context.
Review request - 02Token verification
POST /auth/v1/verify validates recovery redirects before the update form becomes available.
Open verification lane - 03Password update
PUT /auth/v1/user updates the password only after a recovery access token exists.
Inspect update fields - 04Safe routing
Invalid signup or verification redirects move to /auth/verify, while completed recovery returns to /auth/login.
Return to login - 05Accessibility and performance
Labels, status announcements, recovery actions, keyboard links, and responsive CSS stay visible without route-owned runtime observers.
Inspect route