Step 01
Step 1
Request reset; we mail a single-use link to your registered address.
Auth & IDRetail + B2B
Password reset + session revoke.
Reset your password and revoke every other signed-in device from one screen.
The problem
Why this exists.
A leaked password is only dangerous as long as a stale session lingers — most reset flows handle the first half and ignore the second.
Partners on the portal need a verified path back in when an employee leaves with the laptop still signed in.
How it works · 3 steps
From input to outcome.
- Step 02
Step 2
Type a new password (12 characters minimum) and confirm it.
- Step 03
Step 3
Choose 'sign out everywhere' to nuke every other session bound to your account.
Under the hood
The models and routes behind it.
Models called
No models cite this feature directly — backing logic is deterministic Python.
API routes
- POST /api/v1/auth
- GET /api/v1/me/profile
Compliance posture
- Passwords are stored with Argon2id at OWASP-recommended cost factors.
- Reset link expires in fifteen minutes and is invalidated on use or on a fresh reset request.
- DPDP-aligned control — every session revocation is captured in audit-trail.
What it's not
Password reset rotates one credential — it does not erase your data. For that, see dpdp-consent.
Related · features & stories