🔬 MySelf demonstration forum — authentication by SelfRecover (no email), private messages encrypted by SelfDataGuard (resistant to database exfiltration).
Access recovery — without email
Two paths, depending on what you still have. No email, no SMS: the SelfRecover protocol depends on no outside channel.
Level 1 — the backup passphrase you received at sign-up, four generated words. A strong secret: its entropy is what protects you.
Level 2 — two factors: a code from your batch (possession) and the word you chose (knowledge). No username is asked for: the code finds your account on its own.
Or, if you have enrolled this device (possession factor):
You have neither one?
Level 3 — one path remains, a human one. Open a dispute: you describe what you know about your account, an administrator reviews it and decides. It is slow by design, and deliberately so: no automated process should be manipulable into handing over an account.