The question this page answers
I have forgotten my password; email me a link so I can set a new one and get back in.
What you see
- 1Send link emails a recovery link to the address typed.
The title is
Forgot password
with one sentence under it, "The link we email works for 24 hours.", and no basis line or as-of. One field, Email, and one button, Send link, disabled until the address reads as an address. Under it, Back to sign in.
Once the link is sent the sentence reads
If {email} has an account, a 24 hour link is coming.
with the address you typed echoed back, so a typo is visible. The sentence is conditional on purpose: Tightly answers the same way whether or not the address has an account, so the page never says which, and a stranger typing addresses at this form learns nothing about who holds one. Two controls follow: Send again, and Use a different address, which returns to the form with the value kept.
What to do
- Type the email you sign in with in Email.
- Press Send link; Enter does the same.
- Open the link in the email, which opens Set a new password.
- Press Send again for a second live link, or Use a different address to start over.
- Press Back to sign in to return to Sign in without keeping the address.
A second Send again mints a second live link; the first stays valid until it is used or a day old. Tightly sends at most three links to one address in fifteen minutes, and at most ten from one network address; an ask past either answers the same sentence and sends nothing. Nothing here signs you in, changes a password or reveals whether an address exists.
When it is empty or failed
Before a send, a malformed or empty address reads its own word under the field. A refused send keeps the form and its value and prints the server's sentence under the button where one was served; where nothing was, the page's one client sentence stands:
The email could not be sent; try again.
with the support address, support@tightly.io, beside it; a sentence the server served stands alone. An account that signs in through Google or Microsoft is sent no link, and the page answers the same sentence: its password is set with the provider, and Settings under Profile says so for such an account.