Account recovery

Request a secure reset link.

The response is intentionally the same whether or not the account exists. Production links are delivered only through the configured email provider.