Real-World Example
A Super Admin user forgets their password before reviewing merchant requests. They request a reset link, set a new password, and then sign in again with the new password.
Visual Flow
How It Should Work
- It should send reset instructions for valid Super Admin accounts.
- It should require a confirmed password that follows system password rules.
- It should allow login with the new password after reset.
How It Should Not Work
- It should not reset a creditor or EcoMail Hub / ecoPortal™ password from the Super Admin reset flow.
- It should not accept weak or unconfirmed passwords.
- It should not allow unlimited reset attempts in a short period.
Last modified on August 13, 2026
