loading
loading
A secure flow for letting a user regain access to an account.
Password reset flows need expiring tokens, careful emails, rate limits, and clear invalidation. They are a common target for account takeover bugs.
Plainly
Think of Password Reset as the lock and rules that keep people and data safe. A secure flow for letting a user regain access to an account.
In practice
Use it when a workflow touches secrets, permissions, user data, payments, or untrusted input. In practice, define the owner, input, output, and failure mode before you rely on it.