Secure recovery

Regain access.
Leave no loose ends.

Recovery links are short-lived, single-use, and stored only as irreversible hashes. Completing a recovery signs out every existing session.