Skip to content
AI Security

Interview question · Security Foundations & Threat Modeling

Threat-model a password-reset flow.

A reset flow is a second login page with weaker checks. Interviewers use it because every step has a classic bug, and the strong answer finds them in order.

mediumNewPreparation tags: Meta, Google, AmazonUpdated Nov 2026

A reset flow is a second login page with weaker checks. Interviewers use it because every step has a classic bug, and the strong answer finds them in order.

Make your first attempt

What would you say before reading the answer?

  1. 01 State the assumptions your answer depends on.
  2. 02 Explain the mechanism and choose a control.
  3. 03 Name a condition that would change your decision.

The worked answer includes an approach, scoring criteria and follow-up questions. Compare the reasoning with your own.

signing in unlocks more free answers per topic

What if · the follow-ups in this answer

The answer works through 6 follow-ups like an interviewer would

You are asked to threat model a new password reset flow that sends a link by email.

  1. Why is account recovery so sensitive?
  2. What can go wrong with the request step?
  3. What must the token be like?
  4. What can go wrong with delivery?
  5. What happens after reset?
  6. What would the threat model require?

Each rung has a nudge, a model answer, the principle that carries over and the weak answer to avoid. Sign in free to open it.

UP NEXT ON YOUR JOURNEY
Next in this trackHow do attack trees and kill chains help in threat modelling, and where do they mislead?Next in this trackWhy does STRIDE need adapting for ML components, and how would you adapt it?Next in this trackWhat would you log for a new service, and how do you write a detection with an acceptable false-positive rate?
DISCUSSION · 0

No comments yet. Share a correction or a different way to answer it.