Account Recovery
The process by which a user regains access after losing their authenticator: a lost device, a forgotten password, or a revoked credential. It is a parallel authentication path, and its strength sets the real strength of the account.
Recovery is the most commonly under-designed part of an identity system. Deploying phishing-resistant authentication and then allowing a help desk to reset credentials after a few knowledge-based questions means the account's real assurance level is whatever the help desk enforces, and attackers know it. Passwordless deployments face this acutely: with no password to fall back on, recovery has to be designed deliberately, usually through multiple enrolled authenticators, a recovery code, or identity proofing at the same assurance level as enrolment.
See also: help desk social engineering, what is passwordless, passkey, IDV, Temporary Access Pass
Related on Start with Identity
- GlossaryCIAM
CIAM (customer identity and access management) is the sign-up, login, profile and consent layer for an application's customers, not the IAM system that manages
- BlogHow to vet a national digital ID before you build KYC on it
Not every national ID is equally trustworthy or equally easy to verify. A practical seven-point checklist for evaluating a country's digital ID before you wire
- GlossaryIdentity Assurance Level (IAL)
NIST 800-63A levels describing identity proofing strength. IAL1: self-asserted. IAL2: remote or in-person verification with evidence. IAL3: in-person verificati
- GlossaryIdentity Proofing
Identity proofing is the process of confirming that an applicant is a specific, real person before issuing them an account or credential; [NIST SP 800-63A-4](ht
- PodcastState of Identity
Liminal's long-running interview show on the digital identity market, verification, and fraud. 358 episodes, with no new one since May 2024.
- PodcastTrinsic
Trinsic CEO Riley Hughes interviews the people launching identity products: wallets, mobile IDs, verification, and verifiable organisation identity.