> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lynkz.elipseday.xyz/llms.txt
> Use this file to discover all available pages before exploring further.

# Magic Link Recovery for Forgotten Lynkz Dashboard PINs

> Regain access to your Lynkz dashboard when you forget your PIN using a one-time magic link sent to your saved recovery email address via Resend.

Magic link recovery lets you regain dashboard access without your PIN. If you've saved a recovery email on your Lynkz page, you can request a one-time login link that — once clicked — authenticates your session and lets you set a new PIN. This page explains the prerequisites, the full recovery flow, and what to do if your Resend setup needs adjustment.

## Prerequisites

Before you can use magic link recovery, two things must be in place:

<Steps>
  <Step title="Recovery email on file">
    You must have previously set an email address in **Settings → PIN recovery email** inside your dashboard. This cannot be added after you've lost access.
  </Step>

  <Step title="Resend configured on the deployment">
    The Lynkz deployment must have a valid `RESEND_API_KEY` environment variable set. If the instance owner hasn't configured Resend, magic link emails cannot be sent.
  </Step>
</Steps>

## How It Works

<Steps>
  <Step title="Click Forgot PIN?">
    On the dashboard login screen, click **"Forgot PIN?"**.
  </Step>

  <Step title="Enter your recovery email">
    Enter the recovery email address associated with your page.
  </Step>

  <Step title="Token generated and emailed">
    Lynkz generates a **single-use token** server-side and emails it to your recovery address via **Resend**.
  </Step>

  <Step title="Click the link within 15 minutes">
    The link expires after **15 minutes**. If you don't click it in time, return to the login screen and request a new one.
  </Step>

  <Step title="Set a new PIN">
    Clicking the link validates the token server-side, resets your session, and lets you set a new PIN.
  </Step>
</Steps>

## If You Don't Have a Recovery Email

If you never set a recovery email, there is no automated path to recover your dashboard.

<Warning>
  Without a recovery email on file, a forgotten PIN means **permanent loss of dashboard access**. There is no account to contact support about — write your PIN down somewhere safe, and set a recovery email as soon as possible.
</Warning>

If you manage your own Lynkz deployment and have direct database access, manual recovery is possible through the Firebase Console, but this requires administrative access to the backend.

## Resend Free Tier Limitation

Resend's free tier sends from `onboarding@resend.dev` and can **only deliver to the email address registered on your Resend account**. This means magic links will fail silently if your recovery email is different from the Resend account email.

For a production deployment where users may have any recovery email, you need to verify a custom sending domain:

<Steps>
  <Step title="Add your domain in Resend">
    Go to [resend.com/domains](https://resend.com/domains) and add your domain.
  </Step>

  <Step title="Verify DNS records">
    Follow the DNS verification steps provided by Resend.
  </Step>

  <Step title="Set the environment variable">
    Set the `RESEND_FROM_DOMAIN` environment variable on your Vercel deployment to your verified domain.
  </Step>

  <Step title="Redeploy">
    Redeploy your Vercel project for the change to take effect.
  </Step>
</Steps>

Once a custom domain is verified, magic links can be sent to any email address.