# Change Password or Email

Extra confirmation to protect sensitive data

---

## Overview
When changing password or email, ReOTP confirmation is required to protect the account.

### Implementation
1. /settings/security: current password + new + confirm.
2. After validating current: call /api/verify/init (PREDICTIVE).
3. On VERIFIED: update password (bcrypt) + Audit Log + notification.

### UI/UX Guidelines
- Rose + zinc accents.
- Password strength indicator.

## Interactive Demo

Demo type: example
Example ID: usecase-7
Title: Interactive Live Preview

See the live demo at: https://reotp.com/ha/docs/usecase-7-change-password-email