open-legal-products gives Mike a grown-up account recovery path
Mike now treats email confirmation, address changes and lost passwords as complete account journeys, not loose ends.
The team has added the account safeguards users expect when access matters.
- New users confirm their email before completing account setup.
- Email-address changes require confirmation, helping prevent an account from being silently redirected.
- Users can request a password reset and set a new password through a guided recovery flow.
- Authentication links only send users to approved destinations after they sign in.
The work also sets a 10-character minimum for newly created or changed passwords, while leaving existing accounts untouched until a password change.
So what Legal teams and product owners should care because reliable recovery and verified contact details are basic controls for keeping sensitive workspaces accessible and accountable.
Spotted something wrong? Or know the PR text has fresher detail than the writeup above?