Access recovery

New password without revealing account data

The screen response is the same for existing and unknown addresses. This does not allow checking who is registered in Techwi.

• The email contains a short-lived, single-use recovery challenge.
• Repeated attempts are limited by account, address, and network signal.
• After changing the password, old sessions are revoked according to policy.