In this episode of the Inverted Podcast, we dive into one of the most overlooked — and risky — aspects of modern digital systems: account recovery.
Joined by security expert Dean H. Saxe, the conversation explores why recovery isn’t just a backup feature, but often the weakest link in your entire authentication system. From real-world examples of compromised accounts to the surprising ways attackers exploit recovery flows, the team breaks down how even the most secure login systems can fail.
You’ll hear insights on:
➡️ Why account recovery should be treated as a first-class security feature, not an afterthought
➡️ How attackers exploit weak recovery processes instead of breaking strong authentication
➡️ The trade-offs between security, privacy, and accessibility when designing recovery systems
➡️ The real business impact of poor recovery experiences — from lost users to increased costs
➡️ Emerging approaches like passkeys, digital credentials, and identity verification
➡️ Practical advice for both product teams and everyday users to stay protected
Beyond the technical details, this episode highlights the human side of recovery — from frustrated users locked out of their accounts to the real-life consequences of losing access to your digital identity.
If you enjoyed this conversation, don’t forget to like, subscribe, and share for more episodes on security, privacy, cyber abuse, spam, and building better “inverted” products.
Connect with the hosts and guests with comments on the video or on LinkedIn to continue the conversation!
🎧 Listen, learn, and join the conversation! 🎧
Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions.
Check out our 🌐website: https://invertedpm.com/
✅ Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅
🔗 Join the conversation in the Inverted Product Management community on LinkedIn.
Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/
Chapters:
00:00 Intro to Inverted & today’s topic
01:13 What is account recovery?
01:28 Meet the guest: Dean Saxe
03:41 Why recovery is the weakest link
05:54 How recovery differs from login
08:52 User experience: stress vs convenience
12:24 How attackers exploit recovery flows
15:52 Why businesses should care about recovery
21:14 The “triangle” framework (security, privacy, access)
29:17 Modern recovery methods & passkeys
33:46 Practical tips: how users protect their accounts
39:23 Key takeaways & closing