Recovery controls enforced

Recover access without weakening trust.

Account recovery is time-bound, privacy-preserving, and recorded without exposing whether an identity exists.

Authorization path

Policy healthy

Identity

Verified

Policy

Evaluated

Project

Isolated

Delivery

Authorized

Session

Encrypted

Region

Nairobi · KE

Audit

Recording

Your credentials never touch object storage

Kesho evaluates access at the application boundary and issues only the narrow authorization required.

Account recovery

Recover your access.

Enter your work email. If it belongs to an eligible password-managed account, we’ll send a secure recovery link.

For privacy, the confirmation is identical whether or not an account exists. Recovery links expire after 15 minutes and can be used only once.

Remembered your password? Return to secure sign in.