Reset your password
Demo behaviour. In this demo every message — verification, reset and invitation alike — is written to a local file instead of being sent.
If we hold that address, a link has been written out. It is good for one hour.
The response does not vary with the account’s existence or its state. Varying it would turn this form into a directory.
This link no longer works. Reset links last one hour. Your existing password still works.
Resetting is unavailable. The service is not responding. Your existing password still works.
This link cannot be used. The link is not valid for a password change.
What unblocks this
Ask for a new link from the request screen. The refusal is about the link. This flow will not tell you anything about the account, by design.
AC-19 · the request and its result never disclose an account’s existence or state