Account recovery

A recovery link is valid for 30 minutes and can be used once.