Purpose-Bound Recovery

Password or Authenticator Recovery

Password reset and lost-authenticator recovery are separate, single-use workflows. Password reset never removes MFA.

Registered Email Address

Recovery Purpose Reset Password (preserves existing MFA) Replace Lost Authenticator (requires email verification & new MFA enrollment)

Send Recovery Instructions →