← Back to glossary

📧

Recovery Email

Authentication

Phishing Two-Factor Authentication (2FA) Account Recovery Password Reset

Alternate contact channel used for account recovery; must be verified, secured, and monitored.

Definition

Recovery email addresses are account “keys.” They must be verified and protected with strong security (MFA) and change notifications.

In plain English Alternate contact channel used for account recovery; must be verified, secured, and monitored.

Why this matters

Why it matters: Compromised recovery channels commonly lead to account takeover.

Example

Example: Protect the recovery email with MFA, monitor alerts, and review recovery settings regularly.