account-recovery-plan

Featured

Get back into a locked or hacked account the right way — the official recovery routes, what proof you'll need, and how to re-secure it so it doesn't happen again. Use when asked I'm locked out of my account, my account got hacked, help me recover my [email/social/bank] account, or I lost access to 2FA. Produces the official recovery path for the account type, the identity proof to prepare, a re-securing checklist for after you're back in, and warnings about fake 'recovery' services and support scams.

AI & Automation 1,356 stars 240 forks Updated yesterday MIT

Install

View on GitHub

Quality Score: 96/100

Stars 20%
100
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# Account Recovery Plan Losing access — to email, socials, or a bank login — is high-stress, and that's exactly when people fall for fake "account recovery" scammers. This maps the *official* recovery route for your account, tells you what proof to gather so you pass verification, and — critically — how to re-secure everything once you're back in, since a hacked email often means other accounts are exposed too. ## What This Skill Produces - **The official recovery route** — the real recovery flow for that provider/account type (not a third party) - **Proof to prepare** — the identity/ownership evidence their process asks for (recovery contacts, past passwords, device, ID) - **A recovery-order plan** — do email first (it's the reset hub for everything else), then dependent accounts - **The re-secure checklist** — change passwords, reset 2FA, revoke unknown sessions/devices, check forwarding/rules - **Scam warnings** — the fake-support and paid-recovery traps that prey on locked-out users ## Required Inputs Ask for these if not provided: - **Which account** — email, social, bank, gaming, etc., and the provider - **What happened** — forgot password, lost 2FA device, hacked/taken over, or account disabled - **What you still have** — recovery email/phone, backup codes, a trusted device, old passwords - **Signs of compromise** — changed recovery info, unknown logins, missing 2FA - **Linked accounts** — what else uses this email to log in or reset ## Framework: Official Route,...

Details

Author
mohitagw15856
Repository
mohitagw15856/pm-claude-skills
Created
7 months ago
Last Updated
yesterday
Language
HTML
License
MIT

Integrates with

Bundled in these plugins

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Listed

account-recovery

Assess account recovery — alternative authentication, recovery proof, takeover handling, and enterprise operations. Use when the user asks to review password reset, recovery flows, account takeover handling, or SSO recovery. Do not use to design the recovery flow.

1 Updated today
SylphxAI
Code & Development Listed

account-recovery-review

End-to-end account recovery: lost credentials/MFA, locks, compromise, ownership proof, post-recovery hardening.

1 Updated today
SylphxAI
AI & Automation Listed

auditing-account-recovery-and-reset-trust

Audit password reset and account recovery flows for the trust that lets an attacker take over an account: a reset token that is guessable, long-lived, reusable, or not bound to the account it was issued for, a recovery path that verifies a weaker factor than login and bypasses multi-factor, a reset link whose host comes from an attacker-controllable header so the token leaks, and a recovery that trusts an unverified email or phone change to redirect the reset. Covers the recovery surface of authentication systems, where resetting a credential or recovering access is the alternate door into an account. Use when an application offers password reset or account recovery and that flow is a path to authentication. The attacker-driven recovery request is the source, the account it takes over is the sink, and the weak token, bypassed factor, or leaked reset link that grants it is the bug.

5 Updated 2 days ago
UnboundCompute