Real-World Example
Maya forgets her EcoMail Hub / ecoPortal™ password. She requests a reset link using her registered email address, opens the reset link, enters a new confirmed password, and returns to login.
Visual Flow
How It Should Work
- It should use the EcoMail Hub / ecoPortal™ password broker.
- It should throttle repeated reset-link requests.
- It should require a valid reset token, email, password, and confirmation.
- It should redirect the user back to login after a successful reset.
How It Should Not Work
- It should not reset a creditor, consumer, or Super Admin password.
- It should not allow unlimited reset requests from the same email/IP pair.
- It should not accept weak or unconfirmed passwords.
Last modified on August 13, 2026
