1. Verify recovery file
Visible only on localhost to keep the recovery credential out of normal page flows.
RECOVERY FLOW
Recovery invalidates current passkeys and owner sessions, then grants a short-lived setup session for rebind.
Visible only on localhost to keep the recovery credential out of normal page flows.
This removes all passkeys and owner sessions. Use only when you need to rebind.