Account Recovery Support
Fallback support lane for locked or inaccessible accounts.
Recovery Policy
Use this flow when reset tokens fail, account lock is active, or trusted device is unavailable.
Login Security Alert
Support workflows should verify ownership signals: prior device, recent activity, and confirmation email.
- Collect account email + last successful sign-in window.
- Confirm security contact email ownership.
- Issue new verification and reset chain on successful ownership check.
- Force session invalidation on recovery completion.