Recover access without losing the real tenant-aware flow.

The refreshed design still asks for the organization code because the live forgot-password endpoint needs it before it can safely issue a reset link.

Tenant-aware recovery

Password recovery remains scoped to the correct organization, so the community code stays part of the live flow.

Email-first confirmation

If an account exists for that email and tenant combination, the backend sends reset instructions without exposing whether the user exists.

Organization

Needed for recovery

Recovery requests still need an organization code to resolve the tenant ID.

Reset flow

Two steps

This page sends the reset link only. Password entry happens later on the separate reset-password screen.

Request reset link

Forgot your password?

Enter your organization code and email. If the account exists, we'll send recovery instructions.

Why we still ask for your organization code

Accounts are tenant-scoped, so the live forgot-password contract needs both your email and your community identifier.