Back to challenges
Interview ModeInterviewIntermediate

How would you test a password reset flow?

?

Scenario

Your interview prompt

In an interview, you are asked how you would test password reset for a customer portal. Users request an email, open a reset link, create a new password, and sign in. Links expire after 30 minutes and can only be used once.

Manual QA Pro · Module 3 of 9Foundation

Skill outcome

Recovery and security

Explain the complete recovery journey without missing token lifecycle, enumeration, abuse, or session cleanup.

You will produce

A secure recovery test approach

Senior signals to demonstrate

  • Token lifecycle
  • Abuse prevention
  • Session invalidation

List flows, risks, edge cases, data conditions, UX, security, API/backend, and performance concerns.

Tip: a stronger answer usually mixes happy path, negative cases, state changes, data, backend, UX, accessibility, and risk.

How to structure your answer

Happy pathNegative casesData rulesSecurity/API risksUX/performance