Account recovery and ordinary sign-in solve different problems. A useful review records the available recovery paths without assuming that a named website supports any particular one.

What to check
- Identify the documented recovery path.
- Check how changes are confirmed.
- Keep recovery codes and passwords private.
