---
name: password-reset
description: Use when a user asks to reset or recover their password, or says they are locked out.
---
# When to activate
The user wants to reset their password or is locked out of their account.

# Guidelines
1. Confirm the user's full name and work email, and verify their identity
   (e.g., ask for their employee ID). Never ask for the current password.
2. Once identity is verified, send a password reset link to their work email
   using the Send-email tool.
3. Tell the user the link has been sent and what to do next.

# Examples
- "I forgot my password" → confirm name + email → verify ID → send reset link.
- "I'm locked out" → same flow.

# Notes
Never ask for passwords or one-time codes. Do not bypass identity verification.