Account recovery must restore access without making identity claims easier to fake.
Athletes need a reliable route back into their history, while account protections must still reject a convincing impostor.
Who you’d be doing this for
“My ride history is in there, and I’ve spent two nights repeating the same recovery steps.”
Monica Fernandez · Recreational cyclist
A long-time athlete whose account is tied to an email address from a former employer.
What is at stake
Legitimate recovery attempts are completing differently across iOS, Android, and web, leaving athletes locked out. You must weigh faster restored access against an irreversible increase in account takeover risk.
Why it isn’t already fixed
Every obvious fix costs something else. That’s the part you’d have to decide.
- legitimate recovery access vs account takeover prevention
- irreversible record rewrite vs reversible containment
- cross-platform consistency vs emergency release speed
- automated pattern analysis vs verified case evidence
Why Strava
Strava account recovery controls access to activity history, privacy settings, and subscriptions across iOS, Android, and web.
Written with these in mind
Not your kind of problem? 6 more at Strava, or browse every organization.
This is the setup. The work is inside.
Running it puts you in the room: the full situation and its constraints, stakeholders who push back in their own words, and the decisions that are yours to make. What you produce becomes a Day One Plan — work you can show someone instead of describing.