- Shipped
- September 23, 2026 at 11:01 PM UTC
- Author
- Kamo
- Commit
- 7664fbb
d7ff5ed called the address on the user account "personal" everywhere: in the 409's message, the response field and the class. It is not always personal. An administrator can set the account address to the member's work address, which is how Harmony Home Loans' members were made able to reset at all, and then that address simply works. When the account holds any other address, of any domain, the member is shown it masked. The answer's field is now accountEmailHint, the class AccountEmailHint, and the message reads "That is not the email address on your user account. Password resets go to the email address on your account, <hint>." The behaviour is unchanged. Two tests pin it: an account set to the work address is sent the letter, and a hint on a work domain is shown like any other.