---
title: "Verify recovery follows the confirmed account email change"
description: "Change a disposable account email through the supported confirmation flow, then verify recovery reaches the current address and does not reset through the former one."
canonical_url: "https://vostride.com/agent-library/account-recovery/email-change-recovery-destination.md"
md_url: "https://vostride.com/agent-library/account-recovery/email-change-recovery-destination.md"
content_kind: "recipe"
topic: "account-recovery"
---

# Verify recovery follows the confirmed account email change

Change a disposable account email through the supported confirmation flow, then verify recovery reaches the current address and does not reset through the former one.

## Risk

An account email change can leave recovery routing pointed at stale contact data. The scenario proves the confirmed address controls future recovery while respecting the application documented handling of requests for a previous address.

## Fixtures

- A test-owned account with controlled old and new inboxes and permission to change its email.
- The documented email-change confirmation procedure, including any confirmations required in both inboxes.
- An account identity hook that distinguishes a stable account identifier from its mutable email address.

## Steps

1. Complete the product email-change flow using both controlled inboxes as required; verify the account settings display the confirmed new address.
2. Inspect account identity and verify the stable account identifier did not change and the old address is no longer the recovery address.
3. Sign out and request password recovery for the new address; verify the corresponding inbox receives a run-specific reset message.
4. Request recovery for the former address and verify visible feedback and email behavior match the product policy without yielding a usable reset for the moved account.
5. Complete recovery through the new inbox and sign in; verify the same stable account and its private fixture content are restored.

## Expected results

- Confirmed email change updates recovery routing for the existing account.
- The former address cannot recover the moved account through a new reset request.
- Recovery through the current address retains the account identity and resources.

## False-pass traps

- A settings field edited locally is not evidence that the email change was confirmed.
- Creating a second account at the new address would accidentally test registration rather than recovery routing.

## Cleanup

- Restore the disposable account email through the fixture mechanism and remove run-specific messages in both inboxes.

## Use with agent-qa

Adapt this test design to your application's acceptance criteria and configured target using the [recipe execution guide](/agent-library/software-factory/turn-a-recipe-into-an-agent-qa-test.md). External fixture setup and non-UI checks require your own supported hooks or test tooling. Validate the authored test, execute it, and inspect the completed evidence; this recipe is not a recorded test result.

## References

- [agent-qa test](/docs/agent-qa/configuration/test.md)
- [agent-qa hooks](/docs/agent-qa/guides/hooks.md)
- [agent-qa auth state](/docs/agent-qa/guides/auth-state.md)

- [Account recovery QA recipes](/agent-library/account-recovery.md)
- [Software factory QA library](/agent-library.md)