Password Reset

Password recovery and reset flows

What it solves

Password Reset is a multi-step recovery flow that allows users to regain access to their account when they've forgotten their password. The typical flow involves requesting a reset via email, receiving a time-limited token link, and setting a new password. A well-designed password reset balances security (preventing unauthorized resets) with usability (getting legitimate users back into their accounts quickly and without frustration).

When to use

Use Password Reset to allow users to recover access to their account when they've forgotten their password. Common scenarios include:

• User forgot their password and cannot log in
• User wants to change a potentially compromised password
• Administrator triggers a mandatory password reset for security
• Account recovery after detecting suspicious activity
• Periodic password rotation required by security policies