Account security
AuthShell-composed recovery, token expiry, locks, two-factor challenges, recovery codes, trust, and pressure states.
Account recovery, locks, and two-factor authentication
Discovery-safe recovery, token expiry, account locks, authenticators, recovery codes, trusted devices, and pressure states.
Complete screen
Secure your account
Choose a password and revoke other sessions.
Choose a new password
Use 12 or more characters you do not use elsewhere.
All other sessions will be revoked
Security keys and saved recovery codes remain enrolled.
Viewport
Ruby
test/dummy/app/components/gallery/compositions/account_security_page.rbrender NitroKit::AuthShell.new(
id: "gallery-account-security-shell",
aria: {
label: "Nitro account security",
busy: state == "loading" ? "true" : nil
}.compact
) do
render_header
case state
when "recovery-request", "recovery-validation", "loading" then render_recovery_request
when "recovery-sent" then render_message("Recovery email sent", "Use the link sent to [email protected] within 30 minutes.", :mail_check, "Return to sign in", href: "#sign-in")
when "reset" then render_password_reset
when "reset-expired" then render_message("Recovery link expired", "Request a new link. No password or session changed.", :clock_alert, "Request another link", href: entry_path(entry, state: "recovery-request"))
when "account-locked" then render_locked
when "unlock-sent" then render_message("Unlock instructions sent", "The unlock link was sent without revealing whether other sessions remain active.", :mail_check, "Return to sign in", href: "#sign-in")
when "two-factor-challenge", "two-factor-invalid" then render_two_factor
when "recovery-code", "recovery-code-invalid" then render_recovery_code
when "trusted-device" then render_trusted_device
when "success" then render_message("Identity verified", "The account is unlocked and the current browser session is active.", :circle_check, "Continue to workspace", href: "#workspace")
when "long" then render_long
when "mobile" then render_mobile
end
end