A reset signs the account out everywhere and revokes its app passwords. For 72 hours afterwards, passkeys cannot be removed and the email address cannot change.
A recovery key is a rotation key you hold for your DID and keep offline. Whoever holds it can move your identity to another host, so it can also reset your password here.
On the machine that holds the key, mint a token for this service and paste it below with your new password, or reset with it from there.
atpdid recovery-token --did <your DID> --aud did:web:mayon.pyroclastic.cloud --key <file>
atpdid recovery-redeem <token file> --password <file>
A token works for 5 minutes, once. Only a did:plc account can reset this way, with a rotation key ranked above this service's own. Never paste the private key itself.
Remembered it? Sign in.