Interview ModeInterviewIntermediate

How would you test a password reset flow?

Scenario

Your interview prompt

In an interview, you are asked how you would test password reset for a customer portal. Users request an email, open a reset link, create a new password, and sign in. Links expire after 30 minutes and can only be used once.

What would you test?

List flows, risks, edge cases, data conditions, UX, security, API/backend, and performance concerns.

Tip: a stronger answer usually mixes happy path, negative cases, state changes, data, backend, UX, accessibility, and risk.

How to structure your answer

Happy pathNegative casesData rulesSecurity/API risksUX/performance