Account recovery

Recover access without weakening security.

Recovery is private by design: the response does not reveal whether an account exists.