SMTP: ❌ not set up – emails from feedback reasons are only logged (demo).
Default: off. The feature is only active if it is switched on and SMTP (host + sender) is configured – otherwise the login page shows no link and no mail is sent. Process: link on the login page → username/email → always a neutral answer → one-time link (random, stored only as a hash, valid 1 hour) → new password according to the rules → all sessions of the account end, entry in the audit log. Rate limit: 5 requests/15 min per IP, 3/hour per account.
| Enabled | ⏸ no |
| SMTP configured | ❌ no |
| Active users with email | 0 Maintain email |