---
title: "Account recovery QA recipes"
description: "Test reset links, recovery codes and identity changes with controlled inboxes, explicit expiry states and independent session checks."
canonical_url: "https://vostride.com/agent-library/account-recovery.md"
md_url: "https://vostride.com/agent-library/account-recovery.md"
content_kind: "index"
topic: "account-recovery"
---

# Account recovery QA recipes

Test reset links, recovery codes and identity changes with controlled inboxes, explicit expiry states and independent session checks.

Prepare recovery tokens and inbox fixtures outside the browser test. Record the expected token lifecycle without putting live credentials in test definitions.

## Pages (10)

- [Verify recovery follows the confirmed account email change](https://vostride.com/agent-library/account-recovery/email-change-recovery-destination.md): Change a disposable account email through the supported confirmation flow, then verify recovery reaches the current address and does not reset through the former one.
- [Verify an expired reset link cannot change a password](https://vostride.com/agent-library/account-recovery/expired-reset-link.md): Open a deliberately expired recovery link and verify clear failure, unchanged credentials, and a usable route to request a fresh reset message.
- [Verify a newer reset request invalidates older links when required](https://vostride.com/agent-library/account-recovery/new-reset-invalidates-old.md): Request two recovery messages under a latest-link-only policy and prove the older link fails while the newer link resets the intended account.
- [Verify recovery returns only to an allowed application destination](https://vostride.com/agent-library/account-recovery/recovery-link-redirect-safety.md): Exercise a reset link with the application supported return destination and a controlled unapproved destination to verify redirect policy after recovery.
- [Verify reset-request cooldown communicates a usable retry time](https://vostride.com/agent-library/account-recovery/recovery-request-cooldown.md): Exercise a configured recovery resend limit with a test-owned account and controlled clock, checking feedback, message count, and recovery after cooldown.
- [Verify a consumed reset link cannot reset the account again](https://vostride.com/agent-library/account-recovery/reset-link-replay.md): Complete one password reset, replay the same recovery URL, and verify that a second replacement password never becomes an accepted credential.
- [Verify reset form mismatch cannot consume a valid recovery link](https://vostride.com/agent-library/account-recovery/reset-password-confirmation-mismatch.md): Submit mismatched replacement passwords, verify accessible validation and no credential mutation, then correct the form using the same valid reset link.
- [Verify a password reset changes the usable credential](https://vostride.com/agent-library/account-recovery/reset-password-happy-path.md): Reset a disposable account password from a test inbox and prove that the new credential works while the former password is rejected after sign-out.
- [Verify password recovery revokes earlier sessions according to policy](https://vostride.com/agent-library/account-recovery/reset-revokes-sessions.md): Reset an account password while a prior session exists, then inspect and revisit that session to confirm the application enforces its revocation policy.
- [Verify recovery responses follow the account-enumeration policy](https://vostride.com/agent-library/account-recovery/unknown-email-response.md): Compare recovery requests for owned existing and unused addresses, checking visible wording and delivery behavior against the product privacy contract.

## Apply a recipe

These are test designs to adapt to an application's acceptance criteria and fixtures. They are not recorded runs or a claim that a listed application has been tested. Use the [recipe execution guide](https://vostride.com/agent-library/software-factory/turn-a-recipe-into-an-agent-qa-test.md) to author, validate, run and inspect a test.

[All topics](https://vostride.com/agent-library.md)