Flowcharts & Processes

Secure Password Reset Token Architecture

Flowcharts & Algorithms diagram · made in Skemio

Flowchart showing secure password reset: user enters email, checks existence, stores SHA-256 hash with TTL, emails raw link, validates hash, and updates password.
Flowchart showing secure password reset: user enters email, checks existence, stores SHA-256 hash with TTL, emails raw link, validates hash, and updates password.
Open it in SkemioMake your own

What it shows

  • Hash tokens before storing to prevent exposure during database leaks.
  • Enforce short TTLs (10-15 mins) and invalidate tokens on first use.
  • Return identical HTTP responses whether an email exists or not.

The takeaway

Hash tokens at rest, expire them aggressively, and eliminate account enumeration vectors.

More flowcharts & algorithms diagrams