The user was on the verge of just creating a second account anyway, and said they were happy to let me experiment with their account.

Might have been better to use an actual testing account, but oh well, the process went smoothly, and I successfully recovered their account, so there's no losses there :)

I didn't bother explaining the online recovery in detail, because that's just not very interesting. This is for anyone who operates any sort-of service that creates accounts, or as of HF14, simply acting as an independent trustee.

Thanks for checking out my posts James!