Password reset uses email links

Forgot password now sends a one-time link instead of a code.

Password reset uses email links

Forgot password no longer uses a one-time code. You request a reset, check your inbox for a link, then choose a new password on the app.

Verification codes are still used when confirming a recovery email at signup.

Request a reset with your account email and the page URL where the link should return. When captcha is on, include the captcha header. The API always responds the same way whether or not that email is registered.