Homeopathic Assistant

How CurenexAI account recovery works

CurenexAI uses link-based password recovery for registered doctor accounts. When a practitioner requests a reset, the system creates a single-use 64-character token, stores it with a password-reset purpose, and sends a secure reset link to the registered email address.

Password reset links expire after 30 minutes. To protect account privacy, the public form does not reveal whether an email address exists unless debug mode is explicitly enabled for development. Reset requests are rate-limited to reduce abuse and automated guessing.

• Token lifetime: password reset links are valid for 30 minutes.
• Abuse protection: reset requests are rate-limited per IP address.
• Password handling: new passwords are stored only as server-side password hashes, not as readable text.