# change-password

Owner-only mailbox action routed through `daski_use_asset`. The gateway asks the payer wallet to sign a short-lived authorization bound to this provider, action, mailbox asset, and exact request.

Input: `address`.

The address must match the selected asset. Rotation is available for active,
suspended, and expired mailboxes, but never for a deleted mailbox asset, even
if the same address has since been registered again. Deletion and rotation are
serialized, and the provider checks the current asset state before rotating.

The provider generates the new password. It is shown once and may be recovered only through an authorized exact retry during the reviewed seven-day recovery window; it is then permanently redacted. Existing IMAP and SMTP sessions are invalidated.