Secure by default

We show the same response whether the account exists or not.

Short expiry

Reset links expire after 30 minutes for extra protection.

Company-scoped

Company code and email keep the reset tied to the right account.