Password and sessions
Changing your password requires the current password. After a successful change, IN STEP revokes other active sessions while keeping the current session active.
Checking session…
Recovery when the account email is forgotten is outside this block and will be designed separately so owner identification is not weakened.