Overview#

Password Recovery is a form of Credential Recovery as when the Password Change is performed by the user, without another user being involved, as when using User Self Service, we consider Password Reset to be a Password Recovery.

When the current user does not know the value for their password we consider the Password Modify Operation a Password Reset.

Often, when a Password Recovery is performed, the user has to perform a Password Change again after the Password Recovery as defined for Password MUST Change. and modifies their password to a new value.

More Information#

There might be more information for this subject on one of the following:

• Credential Recovery
• Identity Verification Service
• Identity questions
• Knowledge-Based Authentication
• NIST.SP.800-63B
• Password Hint
• Password Management
• Password Reset
• Password Reuse
• Passwordless SMS Authentication