Account Recovery
Lets a user who has forgotten their password regain access to their account via one of four verification methods: email OTP, phone OTP, security question, or a recovery key file. A successful verification issues a short-lived recovery_token used to reset the password.
Account Recovery — Design
Architecture
Account Recovery — Requirements
Overview
Account Recovery — Testing
Test strategy