A key point: the most important design is the recovery mechanism—how users regain access after mistakes.