title: How does the password reset model work?
body: <p>Email providers use secret questions as a part of the process to reset a user's password, when the user doesn't remember it, right? Generally, how does this security model work? How do the security questions identify the user?  </p>
  
  <p>Generally: how does the reset password model work? What is its architecture?</p>