As a user of the application,
I want to be able to recover my password if I forget it,
So that I can regain access to my account without compromising security.
Acceptance Criteria:
Password Recovery Request:
Given I have forgotten my password,
When I visit the login page,
Then I should see an option to recover my password.
And when I select it, I should be able to enter my email address to receive password recovery instructions.
Receiving Recovery Instructions:
Given I have requested password recovery,
When my email is recognized by the system,
Then I should receive an email with a secure link or code to reset my password.
Password Reset:
Given I have received the password reset link or code,
When I follow the link or enter the code along with my new password,
Then I should be able to set a new password for my account.
And I should receive confirmation that my password has been successfully changed.
Security Measures:
Given I am using the password recovery feature,
When I am resetting my password,
Then the process should be secure, and the reset link or code should have an expiration time for added security.
Invalid Email Address Handling:
Given I enter an unrecognized email address in the password recovery form,
When the system does not find the email,
Then I should be informed that the email address is not associated with any account.
As a user of the application, I want to be able to recover my password if I forget it, So that I can regain access to my account without compromising security.
Acceptance Criteria:
Password Recovery Request:
Receiving Recovery Instructions:
Password Reset:
Security Measures:
Invalid Email Address Handling: