Account Recovery

Password recovery creates a short-lived reset token. Email delivery requires a valid configured provider.

Provider-gated delivery

Reset links are sent only when email delivery is enabled and configured.

The response does not reveal whether an email address exists.