Password Recovery

Objective

This section defines the minimum requirements for the password recovery flow, ensuring clarity, security, and accessibility in the process of credential reset by seller users, in accordance with UX best practices and digital security standards.

Insights

• This flow must support limited connectivity scenarios (e.g., fallback to resend code).

• All messages and visual feedback must be clear, concise, and avoid technical jargon.

• The blue padlock illustration may be adapted to match brand identity, as long as semantic clarity is preserved.

---

Accessing the Recovery Flow

01 - “Forgot your password?” link

Must always be visible on the login screen, placed below the authentication fields

Mandatory:

When the link is tapped, the user must be redirected to the password recovery screen.

Recommended:

Provide visual feedback on tap (e.g., color change, underline, ripple effect).

---

Password Recovery Screen (Email Input)

02 - Email input field

Must allow typing with validation for proper email format (e.g., [email protected])

03 - “Send code” button

Must remain disabled until a valid email address is entered

Mandatory:

Upon submission, the system must send a verification code (2FA) to the provided email.

Recommended:

Display a confirmation message after sending the code (e.g., “Verification code sent successfully to your email”).

---

New Password Creation Screen

04 - “Password” and “Repeat password” fields

Must include visibility toggle icons and validate minimum security criteria (e.g., 8 characters, symbol, number, etc)

05 - “Save” button

Must only be enabled when both passwords are valid and match

Mandatory:

Passwords must be encrypted during storage and transmission, following LGPD and PCI standards.

Recommended:

Display real-time password strength and matching feedback (e.g., “Strong password”, “Passwords do not match”).

---

Mandatory Messages

• When the email is invalid:

  Please enter a valid email address to recover your password.

• After code submission:

  A verification code has been sent to the provided email. Please check your inbox.

• When passwords do not match:

  Passwords do not match. Please review the fields and try again.

---

Expected Behaviors

• The “Send code” button must be linked to valid email input only.

• The “Save” button must remain disabled until all conditions are met.

• After setting the new password, the user must be redirected to the login screen with a success confirmation.