Recovery Reset

Locked-Out Recovery

Use this flow when you cannot log in and the email-based password reset is not delivering. You will need the recovery token currently set on the deploy host (ADMIN_RECOVERY_TOKEN).

This endpoint is disabled by default. If the token is not configured on the server, recovery requests return 404. After regaining access, rotate the token to prevent reuse.

Back to ARIA

Use your server-side recovery token to set a new password

Email address

New password

Confirm new password

Recovery token

Create admin account if no row exists yet
Use this only when the page returned "No user with that email" on a prior attempt. Leave unchecked for normal password resets. The server refuses to mint a parallel admin if one already exists with a different email.

Locked-Out Recovery

Recovery Reset

Password Reset