A reset re-keys the vault, and someone arriving here has usually forgotten that they have one.

20 lines of HTML Raw file Open on GitHub

{% extends "auth_base.html" %}
{% from "_authwin.html" import authwin %}
{% block title %}euler — forgot password{% endblock %}
{% block dialogue %}
  {# A reset re-keys the vault, and someone arriving here has usually forgotten
     that they have one. Better said before the mail goes out than after — so it
     rides in the window's status bar. #}
  {% set note %}<b>Heads up</b> · a reset destroys your vault — stored secrets are gone and every device is signed out. Still know your password? Change it from your account page instead; that carries the vault across.{% endset %}
  {% call authwin('forgot password', 'enter your account email and a reset link goes out to it.', note) %}
    <form class="auth-form authwin-form" method="post" action="/forgot" data-pow-bits="{{ pow_bits }}">
      <input type="hidden" name="pow" value="{{ pow }}">
      <input type="hidden" name="pow_nonce" value="">
      <label for="email">email</label>
      <input id="email" name="email" type="email" autocomplete="username" required autofocus>
      <button class="btn btn-primary" type="submit">send reset link</button>
    </form>
    <div class="auth-links"><a class="auth-link" href="/login">&#8592; back to sign in</a></div>
  {% endcall %}
{% endblock %}
{% block scripts %}<script src="{{ asset('/assets/pow.js') }}" defer></script>{% endblock %}