Password reset

What this feature does

Password reset uses an email-controlled Supabase recovery link and a protected password-update step.

This guide describes the behavior implemented by Mallello, the people allowed to use it, and the operational checks that keep it dependable.

Detailed workflow

1. Request recovery without exposing whether the email is registered.
2. Open the time-limited provider link in the same browser.
3. Establish the recovery session.
4. Submit and confirm a new strong password.
5. Revoke or replace older sessions as required and sign in again.

Rules and permissions

• Mallello staff never need the user's password.
• Recovery destinations must be allow-listed.
• Rate limiting protects the request endpoint.
• MFA recovery for administrators remains a separate controlled process.

Failure handling and edge cases

• Expired links can be replaced through a new request.
• A reset message not received may be delayed, filtered, or sent to a different account alias.
• Compromised email accounts require security escalation beyond a password reset.