Recover account access safely.

Password reset uses secure, expiring, single-use tokens. In development mode, an admin-visible fallback link is shown only when email delivery is unavailable.