Verification and account recovery

An account should have safe verification and recovery methods. Harmixo may ask for contact verification, show an important notification or put a recovery request under review when risk exists. Recovery data is not public. Codes, tokens, phone numbers and e-mail addresses must not be shown publicly or given in raw form to people who do not need them. When there is an account problem, the system should show clear next steps: what is needed, what is limited and how the user can continue safely. If a request looks risky, it may be delayed, refused or sent for review. This protects the account; it is not a punishment.