Request a Reset

On the login page, choose Forgot password and submit the account email. The API always returns the same success response, whether or not the address exists, to prevent account enumeration.

Use the Link

Open the reset email and set a password of 8–128 characters. The reset token is stored as a hash, is single-use, and expires after one hour.

After Reset

Sign in with the new password. If the token is expired or already used, request a new email rather than retrying the old link.