Password reset via an email link — two ways: the user requests the link themselves ("forgot password" on the sign-in screen), or an administrator sends it from the user card. From there the path is shared: follow the link from the email, set a new password, terminate all previous sessions.
Both scenarios require configured SMTP — a section in
Admin Panel
(platform settings). Until SMTP is configured, a fallback applies: no
self-service reset, and the administrator issues a temporary password — a
modal in
Admin Panel,
the CLI, or Owner.
The mechanic is in workzone:
"forgot password" reset
·
administrator reset
·
password policy
·
brute-force defense boundary.