matrix-org / matrix-org/matrix-spec

3PID removal after losing access to account it was mapped to

Open
#754 0 comments 0 reactions 0 assignees View on GitHub
feature
Dominant language
HTML
Stars
330
Forks
150
Avg merge
2h 21m
Merged PRs (30d)
3

Description

**Is your feature request related to a problem? Please describe.**
There is no way to remove 3PIDs if you lose access to the matrix account they are mapped to. If you lose a matrix account with your email mapped to it and create a new matrix account, the email will still point to the old matrix account and there is no way to change that, even with access to the email account.

**Describe the solution you'd like**
A client could make a request to remove a 3PID and go through the same verification steps as making a new 3PID to confirm that the 3PID belongs to the person requesting the removal. The server would then remove the 3PID if the authentication is successful.

**Describe alternatives you've considered**
- a removal request from the 3PID (ie. sending an email or sms message that has a special message requesting to remove the 3PID)

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are named in the issue. Start by reviewing the Matrix specification areas governing 3PID ownership, verification, and removal, then determine the protocol changes needed for a verified removal request. Done means the specification defines the request, authentication flow, and server behavior clearly enough for clients and servers to implement.

Written by the indexing model from the issue text.

Assessment

Domain
api, authentication
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.