> ## Documentation Index
> Fetch the complete documentation index at: https://docs.younegotiate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Forgot & Reset Password

> A Super Admin user forgets their password before reviewing merchant requests.

## Real-World Example

A Super Admin user forgets their password before reviewing merchant requests. They request a reset link, set a new password, and then sign in again with the new password.

## Visual Flow

```mermaid placement="top-right" actions={true} theme={"system"}
flowchart TD
    A["Super Admin requests reset"] --> B["System sends reset link"]
    B --> C["User opens reset link"]
    C --> D["User sets new password"]
    D --> E{"Password valid?"}
    E -->|Yes| F["Password is updated"]
    E -->|No| G["Show validation error"]
    classDef default fill:#F8FAFC,stroke:#64748B,stroke-width:1.5px,color:#0F172A;
    classDef actor fill:#E0F2FE,stroke:#0284C7,stroke-width:2px,color:#0C4A6E;
    classDef system fill:#F8FAFC,stroke:#64748B,stroke-width:1.5px,color:#0F172A;
    classDef decision fill:#FEF3C7,stroke:#D97706,stroke-width:2px,color:#78350F;
    classDef risk fill:#FEE2E2,stroke:#DC2626,stroke-width:2px,color:#7F1D1D;
    classDef outcome fill:#DCFCE7,stroke:#16A34A,stroke-width:2px,color:#14532D;
    class A actor;
    class B,C,D system;
    class E decision;
    class F outcome;
    class G risk;
    linkStyle default stroke:#94A3B8,stroke-width:2px;
```

## How It Should Work

* It should send reset instructions for valid Super Admin accounts.
* It should require a confirmed password that follows system password rules.
* It should allow login with the new password after reset.

## How It Should Not Work

* It should not reset a creditor or EcoMail Hub / EcoPortal password from the Super Admin reset flow.
* It should not accept weak or unconfirmed passwords.
* It should not allow unlimited reset attempts in a short period.

## Developer Notes

* Keep password reset behavior on the Super Admin guard.
* Do not reuse creditor reset messaging if it creates portal confusion.

## Related App Areas

* `routes/superadmin/auth.php`
* `app/Livewire/SuperAdmin/Auth/ForgotPasswordPage.php`
* `app/Livewire/SuperAdmin/Auth/ResetPasswordPage.php`