you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 6 months ago

you ask the user for it if they want to recover the account and hash it. if the hash matches your previously stored hash then you send the email

other providers that position themselves as secure for activists or journalists do exactly that and they cannot handle that information

  • source
  • parent