# What is Account Recovery?

> Account recovery is the process that restores access when credentials are lost or compromised — and because it bypasses normal authentication, it is a prime target for social engineering.

- Canonical URL: https://yellowcube.eu/glossary/account-recovery/
- Publisher: Yellow Cube
- Language: en
- Contact: hello@yellowcube.eu

## Content

Recovery flows include reset links, backup codes, recovery email or phone verification, help-desk identity checks, and administrator resets. Attackers exploit the weakest leg: SIM-swap against SMS recovery, guessing security questions, or manipulating support staff into resetting another person’s account.

### Key points

- **Matched recovery strength:** Phishing-resistant sign-in paired with a weak reset path means the reset path becomes the attack surface.
- **Flow instrumentation:** Alert on recovery attempts, require verification evidence for privileged accounts, and audit help-desk resets separately from self-service.
- **Important limitation:** Recovery trades security for availability by design. Every fallback that keeps users from being locked out is also a door that can be abused — treat it as a security control, not a convenience feature.

### Related terms

[Authentication](<https://yellowcube.eu/glossary/authentication/>) · [Login credentials](<https://yellowcube.eu/glossary/login-credentials/>) · [Multi-factor authentication (MFA)](<https://yellowcube.eu/glossary/multi-factor-authentication/>) · [Session management](<https://yellowcube.eu/glossary/session-management/>) · [Identity proofing](<https://yellowcube.eu/glossary/identity-proofing/>) · [SIM swapping](<https://yellowcube.eu/glossary/sim-swapping/>)

### Sources

[NIST SP 800-63B-4, Digital Identity Guidelines: Authentication and Authenticator Management](https://csrc.nist.gov/pubs/sp/800/63/b/4/final) · [NIST SP 800-63-4, Digital Identity Guidelines](https://csrc.nist.gov/pubs/sp/800/63/4/final)

## Attribution and scope

This Markdown representation is generated from the same approved content records as the canonical HTML page. Cite the canonical URL above when referencing this material. Product and service descriptions are informational; confirm project-specific requirements with Yellow Cube.