Account recovery
Recover clinic access
Request a short-lived password reset token. The response does not reveal whether an account exists.
Security controls
Passwords are hashed, sessions use HttpOnly cookies, repeated failures lock the account temporarily, and sign-in events are audited.