In NIST SP 800-63, an authentication system is only as strong as its weakest recovery path. Recovery must require assurance equivalent to the primary credential.