🧩
Account Recovery
Authentication
Processes and factors used to re-establish account access after loss of credentials.
Definition
Account recovery includes verification steps and recovery factors (backup codes, security keys, trusted devices, email reset links). Strong recovery minimizes takeover risk while preserving usability.
In plain English
Processes and factors used to re-establish account access after loss of credentials.
Why this matters
Why it matters: Attackers target recovery flows; secure recovery design reduces account-takeover incidents.
Example
Example: Rate-limit recovery attempts, require multi-factor confirmation, and provide printable recovery codes stored offline.