<@U04UQ68083H> I have a successful recovery flow i...
# ory-copilot
q
@chilly-king-10285 I have a successful recovery flow in Kratos but I don't see an email. I do see this log:
Copy code
Account recovery was requested for an unknown address
What does this mean, this is my schema: { "$id": "https://schemas.ory.sh/presets/kratos/quickstart/email-password/identity.schema.json", "$schema": "http://json-schema.org/draft-07/schema#", "title": "Person", "type": "object", "properties": { "traits": { "type": "object", "properties": { "email": { "type": "string", "format": "email", "title": "email", "minLength": 6, "ory.sh/kratos": { "credentials": { "password": { "identifier": true } }, "recovery": { "via": "email" } } }, "name": { "type": "object", "properties": { "first": { "type": "string", "title": "First Name" }, "last": { "type": "string", "title": "Last Name" } }, "required": ["first", "last"] } }, "required": ["email", "name"], "additionalProperties": false } } }
b
A message from kapa.ai
The log message
Account recovery was requested for an unknown address
means that a recovery attempt was made for an email address that does not exist in your Ory Kratos user database. In other words, the email address entered during the recovery flow does not match any registered identity in your system. This is expected behavior: Ory Kratos does not send a recovery email if the address is not found, to prevent leaking information about which email addresses are registered (a common security best practice). By default, Ory does not notify unknown recipients to avoid account enumeration attacks. If you want the system to send a notification even for unknown addresses, you need to enable the
notify_unknown_recipients
option in your configuration:
Copy code
yaml flows:   recovery:     enabled: true     lifespan: 15m     use: code     notify_unknown_recipients: true
You can enable this in the Ory Console under Authentication → Account recovery or by editing your configuration file and updating it via the CLI. More details are available in the documentation on [attempted recovery notifications](https://www.ory.sh/docs/kratos/self-service/flows/account-recovery-password-reset#attempted-recovery-notifications). Your schema is correct for enabling email-based recovery, so as long as the email exists in your user database, a recovery email should be sent. If you do not receive an email and see this log, double-check that the email you entered matches a registered user exactly (including case and spelling) [Account recovery address](https://www.ory.sh/docs/kratos/self-service/flows/account-recovery-password-reset#account-recovery-address).