Account recovery

Recover access without developer help.

We will send a short-lived recovery link to the account email. For privacy, the success response is the same whether or not the address exists.