For password-based authentication, require immediate selection of a new password upon account recovery.