Account security matters to us
We'll send a secure, time-limited reset link to your email. The link expires in 1 hour and can only be used once.
SHA-256 hashed tokens — never stored in plain text Single-use links — automatically invalidated after use 1-hour expiry — prevents stale token attacks Rate limited — max 3 requests per hour