Merge remote-tracking branch 'origin/master' into feature/PM-1049-TDE-flow-3-login-decryption-options

2025-01-06 18:57:56 +01:00 · 2023-06-05 13:20:52 -04:00 · 2023-06-05 13:20:52 -04:00 · e1b997eec7
commit e1b997eec7
parent a739422f86 f913d8b6be
127 changed files with 4956 additions and 2978 deletions
--- a/.github/whitelist-capital-letters.txt
+++ b/.github/whitelist-capital-letters.txt
@ -23,7 +23,6 @@
 ./libs/angular/src/validators/inputsFieldMatch.validator.ts
 ./libs/angular/src/validators/notAllowedValueAsync.validator.ts
 ./libs/angular/src/services/theming/themeBuilder.ts
-./libs/angular/src/interfaces/selectOptions.ts
 ./libs/common/src/misc/nodeUtils.ts
 ./libs/common/src/misc/linkedFieldOption.decorator.ts
 ./libs/common/src/misc/serviceUtils.ts
--- a/.github/workflows/build-web.yml
+++ b/.github/workflows/build-web.yml
@ -84,6 +84,8 @@ jobs:
            npm_command: "build:bit:poc"
          - name: "ee"
            npm_command: "build:bit:ee"
+          - name: "eudevtest"
+            npm_command: "build:bit:eudevtest"

    steps:
      - name: Checkout repo
--- a/.github/workflows/chromatic.yml
+++ b/.github/workflows/chromatic.yml
@ -37,7 +37,7 @@ jobs:
        run: npm run build-storybook:ci

      - name: Publish to Chromatic
-        uses: chromaui/action@a89b674adf766dbde41ad9ea2b2b60b91188a0f0
+        uses: chromaui/action@a2ed440e22f7d4e2c6b0710f7903aa2df70a1ecd
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          projectToken: ${{ secrets.CHROMATIC_PROJECT_TOKEN }}
--- a/.github/workflows/deploy-non-prod-web.yml
+++ b/.github/workflows/deploy-non-prod-web.yml
@ -13,6 +13,7 @@ on:
        options:
          - QA
          - POC2
+          - eudevtest


 jobs:
--- a/.github/workflows/release-desktop.yml
+++ b/.github/workflows/release-desktop.yml
@ -192,7 +192,7 @@ jobs:

      - name: Create Release
        uses: ncipollo/release-action@a2e71bdd4e7dab70ca26a852f29600c98b33153e # v1.12.0
-        if: ${{ steps.release-channel.outputs.channel == 'latest' && github.event.inputs.release_type != 'Dry Run' && github.event.inputs.github_release }}
+        if: ${{ steps.release-channel.outputs.channel == 'latest' && github.event.inputs.release_type != 'Dry Run' && inputs.github_release }}
        env:
          PKG_VERSION: ${{ steps.version.outputs.version }}
          RELEASE_CHANNEL: ${{ steps.release-channel.outputs.channel }}
@ -270,8 +270,8 @@ jobs:

      - name: Install Snap
        uses: samuelmeuli/action-snapcraft@d33c176a9b784876d966f80fb1b461808edc0641 # v2.1.1
-        with:
-          snapcraft_token: ${{ steps.retrieve-secrets.outputs.snapcraft-store-token }}
+        env:
+          SNAPCRAFT_STORE_CREDENTIALS: ${{ steps.retrieve-secrets.outputs.snapcraft-store-token }}

      - name: Setup
        run: mkdir dist
@ -299,9 +299,11 @@ jobs:

      - name: Deploy to Snap Store
        if: ${{ github.event.inputs.release_type != 'Dry Run' }}
+        env:
+          SNAPCRAFT_STORE_CREDENTIALS: ${{ steps.retrieve-secrets.outputs.snapcraft-store-token }}
        run: |
-          snapcraft upload bitwarden_${{ env._PKG_VERSION }}_amd64.snap --release stable
-          snapcraft logout
+          /snap/bin/snapcraft upload bitwarden_${{ env._PKG_VERSION }}_amd64.snap --release stable
+          /snap/bin/snapcraft logout
        working-directory: apps/desktop/dist

  choco:
--- a/apps/browser/package.json
+++ b/apps/browser/package.json
@ -1,6 +1,6 @@
 {
  "name": "@bitwarden/browser",
-  "version": "2023.4.0",
+  "version": "2023.5.0",
  "scripts": {
    "build": "webpack",
    "build:mv3": "cross-env MANIFEST_VERSION=3 webpack",
--- a/apps/browser/src/_locales/el/messages.json
+++ b/apps/browser/src/_locales/el/messages.json
@ -1462,13 +1462,13 @@
    "message": "Αυτόματη συμπλήρωση αντικειμένου"
  },
  "insecurePageWarning": {
-    "message": "Warning: This is an unsecured HTTP page, and any information you submit can potentially be seen and changed by others. This Login was originally saved on a secure (HTTPS) page."
+    "message": "Προειδοποίηση: Αυτή είναι μια μη ασφαλή σελίδα HTTP και οποιαδήποτε πληροφορία υποβάλλετε μπορεί να γίνει ορατή και επεμβάσιμη από άλλους. Αυτή η σύνδεση αποθηκεύτηκε αρχικά σε μια ασφαλή (HTTPS) σελίδα."
  },
  "insecurePageWarningFillPrompt": {
    "message": "Do you still wish to fill this login?"
  },
  "autofillIframeWarning": {
-    "message": "The form is hosted by a different domain than the URI of your saved login. Choose OK to auto-fill anyway, or Cancel to stop."
+    "message": "Η φόρμα φιλοξενείται από διαφορετικό τομέα (domain) από το λινκ (uri) της αποθηκευμένης σύνδεσης σας (login). Επιλέξτε OK για αυτόματη συμπλήρωση, ή Ακύρωση για να σταματήσετε."
  },
  "autofillIframeWarningTip": {
    "message": "To prevent this warning in the future, save this URI, $HOSTNAME$, to your Bitwarden login item for this site.",
--- a/apps/browser/src/_locales/pl/messages.json
+++ b/apps/browser/src/_locales/pl/messages.json
@ -1471,7 +1471,7 @@
    "message": "Formularz jest hostowany przez inną domenę niż zapisany adres URI dla tego loginu. Wybierz OK, aby i tak automatycznie wypełnić lub anuluj aby zatrzymać."
  },
  "autofillIframeWarningTip": {
-    "message": "To prevent this warning in the future, save this URI, $HOSTNAME$, to your Bitwarden login item for this site.",
+    "message": "Aby zapobiec temu ostrzeżeniu w przyszłości, zapisz ten URI, $HOSTNAME$, dla tej witryny.",
    "placeholders": {
      "hostname": {
        "content": "$1",
--- a/apps/browser/src/_locales/pt_PT/messages.json
+++ b/apps/browser/src/_locales/pt_PT/messages.json
--- a/apps/browser/src/_locales/zh_CN/messages.json
+++ b/apps/browser/src/_locales/zh_CN/messages.json
@ -1462,7 +1462,7 @@
    "message": "项目已自动填充 "
  },
  "insecurePageWarning": {
-    "message": "警告：这是一个不安全的 HTTP 页面，您提交的任何信息都可能被其他人看到和更改。此登录最初保存在安全 (HTTPS) 页面上。"
+    "message": "警告：这是一个不安全的 HTTP 页面，您提交的任何信息都可能被其他人看到和更改。此登录信息最初保存在安全 (HTTPS) 页面上。"
  },
  "insecurePageWarningFillPrompt": {
    "message": "您仍然想要填充此登录信息吗？"
@ -1471,7 +1471,7 @@
    "message": "该表单由不同于您保存的登录的 URI 域名托管。选择「确定」以自动填充，或选择「取消」停止填充。"
  },
  "autofillIframeWarningTip": {
-    "message": "要防止以后再次出现此警告，请将此站点的 URI $HOSTNAME$ 保存到您的 Bitwarden 登录项目中。",
+    "message": "要防止以后出现此警告，请将此站点的 URI $HOSTNAME$ 保存到您的 Bitwarden 登录项目中。",
    "placeholders": {
      "hostname": {
        "content": "$1",
--- a/apps/browser/src/manifest.json
+++ b/apps/browser/src/manifest.json
@ -2,7 +2,7 @@
  "manifest_version": 2,
  "name": "__MSG_extName__",
  "short_name": "__MSG_appName__",
-  "version": "2023.4.0",
+  "version": "2023.5.0",
  "description": "__MSG_extDesc__",
  "default_locale": "en",
  "author": "Bitwarden Inc.",
--- a/apps/browser/src/manifest.v3.json
+++ b/apps/browser/src/manifest.v3.json
@ -3,7 +3,7 @@
  "minimum_chrome_version": "102.0",
  "name": "__MSG_extName__",
  "short_name": "__MSG_appName__",
-  "version": "2023.4.0",
+  "version": "2023.5.0",
  "description": "__MSG_extDesc__",
  "default_locale": "en",
  "author": "Bitwarden Inc.",
--- a/apps/browser/store/locales/pt_PT/copy.resx
+++ b/apps/browser/store/locales/pt_PT/copy.resx
@ -155,21 +155,21 @@ Secure and share sensitive data within your Bitwarden Vault from any browser, mo
    <value>Um gestor de palavras-passe seguro e gratuito para todos os seus dispositivos</value>
  </data>
  <data name="ScreenshotSync" xml:space="preserve">
-    <value>Sincronize e acesse o seu cofre através de múltiplos dispositivos</value>
+    <value>Sincronize e aceda ao seu cofre através de vários dispositivos</value>
  </data>
  <data name="ScreenshotVault" xml:space="preserve">
-    <value>Gira todas as suas credenciais e palavras-passe a partir de um cofre seguro</value>
+    <value>Gira todos os seus inícios de sessão e palavras-passe a partir de um cofre seguro</value>
  </data>
  <data name="ScreenshotAutofill" xml:space="preserve">
-    <value>Rapidamente auto-preencha as suas credenciais dentro de qualquer website que visitar</value>
+    <value>Preencha rapidamente e de forma automática as suas credenciais de início de sessão em qualquer site que visite</value>
  </data>
  <data name="ScreenshotMenu" xml:space="preserve">
-    <value>O seu cofre é também convenientemente acessível a partir do menu de contexto de clique de lado direito do rato</value>
+    <value>O seu cofre também está convenientemente acessível a partir do menu do botão direito do rato</value>
  </data>
  <data name="ScreenshotPassword" xml:space="preserve">
    <value>Gera automaticamente palavras-passe fortes, aleatórias e seguras</value>
  </data>
  <data name="ScreenshotEdit" xml:space="preserve">
-    <value>A sua informação é gerida com segurança utilizando encriptação AES-256 bits</value>
+    <value>As suas informações são geridas de forma segura utilizando a encriptação AES-256 bit</value>
  </data>
 </root>
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@ -1,7 +1,7 @@
 {
  "name": "@bitwarden/cli",
  "description": "A secure and free password manager for all of your devices.",
-  "version": "2023.4.0",
+  "version": "2023.5.0",
  "keywords": [
    "bitwarden",
    "password",
@ -57,7 +57,7 @@
    "form-data": "4.0.0",
    "https-proxy-agent": "5.0.1",
    "inquirer": "8.2.5",
-    "jsdom": "22.0.0",
+    "jsdom": "22.1.0",
    "jszip": "3.10.1",
    "koa": "2.14.2",
    "koa-bodyparser": "4.4.0",
--- a/apps/cli/src/tools/import.command.ts
+++ b/apps/cli/src/tools/import.command.ts
@ -2,6 +2,7 @@ import * as program from "commander";
 import * as inquirer from "inquirer";

 import { OrganizationService } from "@bitwarden/common/admin-console/abstractions/organization/organization.service.abstraction";
+import { SyncService } from "@bitwarden/common/vault/abstractions/sync/sync.service.abstraction";
 import { ImportServiceAbstraction, ImportType } from "@bitwarden/importer";

 import { Response } from "../models/response";
@ -11,7 +12,8 @@ import { CliUtils } from "../utils";
 export class ImportCommand {
  constructor(
    private importService: ImportServiceAbstraction,
-    private organizationService: OrganizationService
+    private organizationService: OrganizationService,
+    private syncService: SyncService
  ) {}

  async run(
@ -76,6 +78,7 @@ export class ImportCommand {

      const response = await this.importService.import(importer, contents, organizationId);
      if (response.success) {
+        this.syncService.fullSync(true);
        return Response.success(new MessageResponse("Imported " + filepath, null));
      }
    } catch (err) {
--- a/apps/cli/src/vault.program.ts
+++ b/apps/cli/src/vault.program.ts
@ -442,7 +442,11 @@ export class VaultProgram extends Program {
      })
      .action(async (format, filepath, options) => {
        await this.exitIfLocked();
-        const command = new ImportCommand(this.main.importService, this.main.organizationService);
+        const command = new ImportCommand(
+          this.main.importService,
+          this.main.organizationService,
+          this.main.syncService
+        );
        const response = await command.run(format, filepath, options);
        this.processResponse(response);
      });
--- a/apps/desktop/desktop_native/Cargo.lock
+++ b/apps/desktop/desktop_native/Cargo.lock
@ -24,9 +24,9 @@ dependencies = [

 [[package]]
 name = "anyhow"
-version = "1.0.70"
+version = "1.0.71"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7de8ce5e0f9f8d88245311066a578d72b7af3e7088f32783804676302df237e4"
+checksum = "9c7d0618f0e0b7e8ff11427422b64564d5fb0be1940354bfe2e0529b18a9d9b8"

 [[package]]
 name = "autocfg"
@ -36,9 +36,9 @@ checksum = "d468802bab17cbc0cc575e9b053f41e72aa36bfa6b7f55e3529ffa43161b97fa"

 [[package]]
 name = "base64"
-version = "0.21.0"
+version = "0.21.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a4a4ddaa51a5bc52a6948f74c06d20aaaddb71924eab79b8c97a8c556e942d6a"
+checksum = "604178f6c5c21f02dc555784810edfb88d34ac2c73b2eae109655649ee73ce3d"

 [[package]]
 name = "bitflags"
@ -294,6 +294,17 @@ version = "0.3.28"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4fff74096e71ed47f8e023204cfd0aa1289cd54ae5430a9523be060cdb849964"

+[[package]]
+name = "futures-macro"
+version = "0.3.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "89ca545a94061b6365f2c7355b4b32bd20df3ff95f02da9329b34ccc3bd6ee72"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.14",
+]
+
 [[package]]
 name = "futures-task"
 version = "0.3.28"
@ -307,6 +318,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "26b01e40b772d54cf6c6d721c1d1abd0647a0106a12ecaa1c186273392a69533"
 dependencies = [
 "futures-core",
+ "futures-macro",
 "futures-task",
 "pin-project-lite",
 "pin-utils",
@ -336,26 +348,29 @@ dependencies = [

 [[package]]
 name = "gio"
-version = "0.15.12"
+version = "0.17.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "68fdbc90312d462781a395f7a16d96a2b379bb6ef8cd6310a2df272771c4283b"
+checksum = "d14522e56c6bcb6f7a3aebc25cbcfb06776af4c0c25232b601b4383252d7cb92"
 dependencies = [
 "bitflags 1.3.2",
 "futures-channel",
 "futures-core",
 "futures-io",
+ "futures-util",
 "gio-sys",
 "glib",
 "libc",
 "once_cell",
+ "pin-project-lite",
+ "smallvec",
 "thiserror",
 ]

 [[package]]
 name = "gio-sys"
-version = "0.15.10"
+version = "0.17.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32157a475271e2c4a023382e9cab31c4584ee30a97da41d3c4e9fdd605abcf8d"
+checksum = "6b1d43b0d7968b48455244ecafe41192871257f5740aa6b095eb19db78e362a5"
 dependencies = [
 "glib-sys",
 "gobject-sys",
@ -366,19 +381,22 @@ dependencies = [

 [[package]]
 name = "glib"
-version = "0.15.12"
+version = "0.17.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "edb0306fbad0ab5428b0ca674a23893db909a98582969c9b537be4ced78c505d"
+checksum = "a7f1de7cbde31ea4f0a919453a2dcece5d54d5b70e08f8ad254dc4840f5f09b6"
 dependencies = [
 "bitflags 1.3.2",
 "futures-channel",
 "futures-core",
 "futures-executor",
 "futures-task",
+ "futures-util",
+ "gio-sys",
 "glib-macros",
 "glib-sys",
 "gobject-sys",
 "libc",
+ "memchr",
 "once_cell",
 "smallvec",
 "thiserror",
@ -386,9 +404,9 @@ dependencies = [

 [[package]]
 name = "glib-macros"
-version = "0.15.13"
+version = "0.17.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "10c6ae9f6fa26f4fb2ac16b528d138d971ead56141de489f8111e259b9df3c4a"
+checksum = "0a7206c5c03851ef126ea1444990e81fdd6765fb799d5bc694e4897ca01bb97f"
 dependencies = [
 "anyhow",
 "heck",
@ -401,9 +419,9 @@ dependencies = [

 [[package]]
 name = "glib-sys"
-version = "0.15.10"
+version = "0.17.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ef4b192f8e65e9cf76cbf4ea71fa8e3be4a0e18ffe3d68b8da6836974cc5bad4"
+checksum = "49f00ad0a1bf548e61adfff15d83430941d9e1bb620e334f779edd1c745680a5"
 dependencies = [
 "libc",
 "system-deps",
@ -411,9 +429,9 @@ dependencies = [

 [[package]]
 name = "gobject-sys"
-version = "0.15.10"
+version = "0.17.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0d57ce44246becd17153bd035ab4d32cfee096a657fc01f2231c9278378d1e0a"
+checksum = "15e75b0000a64632b2d8ca3cf856af9308e3a970844f6e9659bd197f026793d0"
 dependencies = [
 "glib-sys",
 "libc",
@ -500,9 +518,9 @@ dependencies = [

 [[package]]
 name = "libsecret"
-version = "0.1.5"
+version = "0.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a15ed5dab9789d9c4caedf88457214d822cfbad5562b63f6c8f61597501f6b8b"
+checksum = "accb700635d0b1b296d83c93fa5d112400168d04481db0ccca946293af9f0206"
 dependencies = [
 "bitflags 1.3.2",
 "gio",
@ -514,9 +532,9 @@ dependencies = [

 [[package]]
 name = "libsecret-sys"
-version = "0.1.5"
+version = "0.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "77abfe0fd35152462d1736d11f5c1ba381f74535171b2138fed1604bcb803d2b"
+checksum = "2b06012ca123d27ccceffa112d0f930c23eb549a2447dc710e99f5dc2d1040b2"
 dependencies = [
 "gio-sys",
 "glib-sys",
@ -569,14 +587,14 @@ dependencies = [
 "libc",
 "log",
 "wasi",
- "windows-sys",
+ "windows-sys 0.45.0",
 ]

 [[package]]
 name = "napi"
-version = "2.12.4"
+version = "2.13.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "556470a21074b55be8adee5f27ca04389cfdaca323a28b4b0e9c15466de94731"
+checksum = "d7f0a2e93526dd9c8c522d72a4d0c88678be8966fabe9fb8f2947fde6339b682"
 dependencies = [
 "bitflags 2.2.1",
 "ctor",
@ -594,10 +612,11 @@ checksum = "882a73d9ef23e8dc2ebbffb6a6ae2ef467c0f18ac10711e4cc59c5485d41df0e"

 [[package]]
 name = "napi-derive"
-version = "2.12.3"
+version = "2.13.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "af2ac63101a19228b0881694cac07468d642fd10e4f943a9c9feebeebf1a4787"
+checksum = "da1c6a8fa84d549aa8708fcd062372bf8ec6e849de39016ab921067d21bde367"
 dependencies = [
+ "cfg-if",
 "convert_case",
 "napi-derive-backend",
 "proc-macro2",
@ -607,9 +626,9 @@ dependencies = [

 [[package]]
 name = "napi-derive-backend"
-version = "1.0.49"
+version = "1.0.52"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0e32b5bc4d803e40b783b0aa3fe488eac8711cfaa4c5c9915293dfd3d0b99925"
+checksum = "20bbc7c69168d06a848f925ec5f0e0997f98e8c8d4f2cc30157f0da51c009e17"
 dependencies = [
 "convert_case",
 "once_cell",
@ -665,7 +684,7 @@ dependencies = [
 "libc",
 "redox_syscall",
 "smallvec",
- "windows-sys",
+ "windows-sys 0.45.0",
 ]

 [[package]]
@ -823,9 +842,9 @@ checksum = "1792db035ce95be60c3f8853017b3999209281c24e2ba5bc8e59bf97a0c590c1"

 [[package]]
 name = "security-framework"
-version = "2.8.2"
+version = "2.9.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a332be01508d814fed64bf28f798a146d73792121129962fdf335bb3c49a4254"
+checksum = "1fc758eb7bffce5b308734e9b0c1468893cae9ff70ebf13e7090be8dcbcc83a8"
 dependencies = [
 "bitflags 1.3.2",
 "core-foundation",
@ -836,9 +855,9 @@ dependencies = [

 [[package]]
 name = "security-framework-sys"
-version = "2.8.0"
+version = "2.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "31c9bb296072e961fcbd8853511dd39c2d8be2deb1e17c6860b1d30732b323b4"
+checksum = "f51d0c0d83bec45f16480d0ce0058397a69e48fcdc52d1dc8855fb68acbd31a7"
 dependencies = [
 "core-foundation-sys",
 "libc",
@ -976,9 +995,9 @@ dependencies = [

 [[package]]
 name = "tokio"
-version = "1.27.0"
+version = "1.28.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d0de47a4eecbe11f498978a9b29d792f0d2692d1dd003650c24c76510e3bc001"
+checksum = "94d7b1cfd2aa4011f2de74c2c4c63665e27a71006b0a192dcd2710272e73dfa2"
 dependencies = [
 "autocfg",
 "bytes",
@ -990,14 +1009,14 @@ dependencies = [
 "signal-hook-registry",
 "socket2",
 "tokio-macros",
- "windows-sys",
+ "windows-sys 0.48.0",
 ]

 [[package]]
 name = "tokio-macros"
-version = "2.0.0"
+version = "2.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61a573bdc87985e9d6ddeed1b3d864e8a302c847e40d647746df2f1de209d1ce"
+checksum = "630bdcf245f78637c13ec01ffae6187cca34625e8c63150d424b59e55af2675e"
 dependencies = [
 "proc-macro2",
 "quote",
@ -1135,6 +1154,15 @@ dependencies = [
 "windows-targets 0.42.2",
 ]

+[[package]]
+name = "windows-sys"
+version = "0.48.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "677d2418bec65e3338edb076e806bc1ec15693c5d0104683f2efe857f61056a9"
+dependencies = [
+ "windows-targets 0.48.0",
+]
+
 [[package]]
 name = "windows-targets"
 version = "0.42.2"
--- a/apps/desktop/desktop_native/Cargo.toml
+++ b/apps/desktop/desktop_native/Cargo.toml
@ -14,17 +14,17 @@ manual_test = []

 [dependencies]
 aes = "=0.8.2"
-anyhow = "=1.0.70"
-base64 = "=0.21.0"
+anyhow = "=1.0.71"
+base64 = "=0.21.2"
 cbc = { version = "=0.1.2", features = ["alloc"] }
-napi = { version = "=2.12.4", features = ["async"] }
-napi-derive = "=2.12.3"
+napi = { version = "=2.13.1", features = ["async"] }
+napi-derive = "=2.13.0"
 rand = "=0.8.5"
 retry = "=2.0.0"
 scopeguard = "=1.1.0"
 sha2 = "=0.10.6"
 thiserror = "=1.0.40"
-tokio = { version = "=1.27.0", features = ["full"] }
+tokio = { version = "=1.28.2", features = ["full"] }
 typenum = "=1.16.0"

 [build-dependencies]
@ -49,9 +49,9 @@ keytar = "=0.1.6"

 [target.'cfg(target_os = "macos")'.dependencies]
 core-foundation = "=0.9.3"
-security-framework = "=2.8.2"
-security-framework-sys = "=2.8.0"
+security-framework = "=2.9.1"
+security-framework-sys = "=2.9.0"

 [target.'cfg(target_os = "linux")'.dependencies]
-gio = "=0.15.12"
-libsecret = "=0.1.5"
+gio = "=0.17.9"
+libsecret = "=0.3.0"
--- a/apps/desktop/desktop_native/package.json
+++ b/apps/desktop/desktop_native/package.json
@ -11,7 +11,7 @@
  "author": "",
  "license": "GPL-3.0",
  "devDependencies": {
-    "@napi-rs/cli": "2.15.2"
+    "@napi-rs/cli": "2.16.1"
  },
  "napi": {
    "name": "desktop_native",
--- a/apps/desktop/native-messaging-test-runner/package-lock.json
+++ b/apps/desktop/native-messaging-test-runner/package-lock.json
@ -11,7 +11,7 @@
      "dependencies": {
        "@bitwarden/common": "file:../../../libs/common",
        "@bitwarden/node": "file:../../../libs/node",
-        "module-alias": "2.2.2",
+        "module-alias": "2.2.3",
        "node-ipc": "9.2.1",
        "ts-node": "10.9.1",
        "uuid": "8.3.2",
@ -19,7 +19,7 @@
      },
      "devDependencies": {
        "@tsconfig/node16": "1.0.4",
-        "@types/node": "18.16.14",
+        "@types/node": "18.16.16",
        "@types/node-ipc": "9.2.0",
        "typescript": "4.7.4"
      }
@ -99,9 +99,9 @@
      "integrity": "sha512-vxhUy4J8lyeyinH7Azl1pdd43GJhZH/tP2weN8TntQblOY+A0XbT8DJk1/oCPuOOyg/Ja757rG0CgHcWC8OfMA=="
    },
    "node_modules/@types/node": {
-      "version": "18.16.14",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-18.16.14.tgz",
-      "integrity": "sha512-+ImzUB3mw2c5ISJUq0punjDilUQ5GnUim0ZRvchHIWJmOC0G+p0kzhXBqj6cDjK0QdPFwzrHWgrJp3RPvCG5qg=="
+      "version": "18.16.16",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-18.16.16.tgz",
+      "integrity": "sha512-NpaM49IGQQAUlBhHMF82QH80J08os4ZmyF9MkpCzWAGuOHqE4gTEbhzd7L3l5LmWuZ6E0OiC1FweQ4tsiW35+g=="
    },
    "node_modules/@types/node-ipc": {
      "version": "9.2.0",
@ -270,9 +270,9 @@
      "integrity": "sha512-s8UhlNe7vPKomQhC1qFelMokr/Sc3AgNbso3n74mVPA5LTZwkB9NlXf4XPamLxJE8h0gh73rM94xvwRT2CVInw=="
    },
    "node_modules/module-alias": {
-      "version": "2.2.2",
-      "resolved": "https://registry.npmjs.org/module-alias/-/module-alias-2.2.2.tgz",
-      "integrity": "sha512-A/78XjoX2EmNvppVWEhM2oGk3x4lLxnkEA4jTbaK97QKSDjkIoOsKQlfylt/d3kKKi596Qy3NP5XrXJ6fZIC9Q=="
+      "version": "2.2.3",
+      "resolved": "https://registry.npmjs.org/module-alias/-/module-alias-2.2.3.tgz",
+      "integrity": "sha512-23g5BFj4zdQL/b6tor7Ji+QY4pEfNH784BMslY9Qb0UnJWRAt+lQGLYmRaM0KDBwIG23ffEBELhZDP2rhi9f/Q=="
    },
    "node_modules/node-ipc": {
      "version": "9.2.1",
--- a/apps/desktop/native-messaging-test-runner/package.json
+++ b/apps/desktop/native-messaging-test-runner/package.json
@ -16,7 +16,7 @@
  "dependencies": {
    "@bitwarden/common": "file:../../../libs/common",
    "@bitwarden/node": "file:../../../libs/node",
-    "module-alias": "2.2.2",
+    "module-alias": "2.2.3",
    "node-ipc": "9.2.1",
    "ts-node": "10.9.1",
    "uuid": "8.3.2",
@ -24,7 +24,7 @@
  },
  "devDependencies": {
    "@tsconfig/node16": "1.0.4",
-    "@types/node": "18.16.14",
+    "@types/node": "18.16.16",
    "@types/node-ipc": "9.2.0",
    "typescript": "4.7.4"
  },
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@ -1,7 +1,7 @@
 {
  "name": "@bitwarden/desktop",
  "description": "A secure and free password manager for all of your devices.",
-  "version": "2023.4.1",
+  "version": "2023.5.1",
  "keywords": [
    "bitwarden",
    "password",
--- a/apps/desktop/src/auth/login/login.component.ts
+++ b/apps/desktop/src/auth/login/login.component.ts
@ -98,7 +98,7 @@ export class LoginComponent extends BaseLoginComponent implements OnDestroy {

  async ngOnInit() {
    await super.ngOnInit();
-    await this.checkSelfHosted();
+    await this.getLoginWithDevice(this.loggedEmail);
    this.broadcasterService.subscribe(BroadcasterSubscriptionId, async (message: any) => {
      this.ngZone.run(() => {
        switch (message.command) {
@ -151,7 +151,7 @@ export class LoginComponent extends BaseLoginComponent implements OnDestroy {
    // eslint-disable-next-line rxjs/no-async-subscribe
    childComponent.onSaved.pipe(takeUntil(this.componentDestroyed$)).subscribe(async () => {
      modal.close();
-      await this.checkSelfHosted();
+      await this.getLoginWithDevice(this.loggedEmail);
    });
  }

@ -188,10 +188,4 @@ export class LoginComponent extends BaseLoginComponent implements OnDestroy {
    const email = this.loggedEmail;
    document.getElementById(email == null || email === "" ? "email" : "masterPassword").focus();
  }
-
-  private async checkSelfHosted() {
-    this.selfHosted = this.environmentService.isSelfHosted();
-
-    await this.getLoginWithDevice(this.loggedEmail);
-  }
 }
--- a/apps/desktop/src/locales/af/messages.json
+++ b/apps/desktop/src/locales/af/messages.json
@ -464,13 +464,13 @@
    "message": "Is u seker u wil hierdie aanhegsel skrap?"
  },
  "attachmentSaved": {
-    "message": "Die aanhegsel is bewaar."
+    "message": "Aanhegsel is bewaar"
  },
  "file": {
    "message": "Lêer"
  },
  "selectFile": {
-    "message": "Kies ’n lêer."
+    "message": "Kies ’n lêer"
  },
  "maxFileSize": {
    "message": "Maksimumlêergrootte is 500 MB."
@ -711,7 +711,7 @@
    "message": "Ikoonbedienerbronadres"
  },
  "environmentSaved": {
-    "message": "Die omgewingbronadresse is bewaar."
+    "message": "Die omgewingbronadresse is bewaar"
  },
  "ok": {
    "message": "Goed"
@ -1001,7 +1001,7 @@
    "description": "Copy to clipboard"
  },
  "checkForUpdates": {
-    "message": "Gaan na vir bywerkings"
+    "message": "Gaan na vir bywerkings…"
  },
  "version": {
    "message": "Weergawe $VERSION_NUM$",
@ -1393,7 +1393,7 @@
    "message": "Ontgrendel met Windows Hello"
  },
  "additionalWindowsHelloSettings": {
-    "message": "Additional Windows Hello settings"
+    "message": "Bykomende Windows Hello-instellings"
  },
  "windowsHelloConsentMessage": {
    "message": "Bevestig vir Bitwarden."
@ -1414,7 +1414,7 @@
    "message": "Vra vir Touch ID by lansering"
  },
  "requirePasswordOnStart": {
-    "message": "Require password or PIN on app start"
+    "message": "Vereis wagwoord of PIN wanneer toep geopen word"
  },
  "recommendedForSecurity": {
    "message": "Aanbeveel vir veiligheid."
@ -1859,7 +1859,7 @@
    "message": "U hoofwagwoord is onlangs deur ’n administrateur in u organisasie verander. Om toegang tot u kluis te verkry moet u dit nóú bywerk. Deur voort te gaan word u uit u huidige sessie geteken, waarna u weer sal moet aanteken. Aktiewe sessies op ander toestelle kan vir tot ’n uur steeds aktief bly."
  },
  "updateWeakMasterPasswordWarning": {
-    "message": "Your master password does not meet one or more of your organization policies. In order to access the vault, you must update your master password now. Proceeding will log you out of your current session, requiring you to log back in. Active sessions on other devices may continue to remain active for up to one hour."
+    "message": "U hoofwagwoord voldoen nie aan een of meer van die organisasiebeleide nie. Om toegang tot die kluis te kry, moet u nou u hoofwagwoord bywerk. Deur voort te gaan sal u van u huidige sessie afgeteken word, en u sal weer moet aanteken. Aktiewe sessies op ander toestelle kan vir tot een uur aktief bly."
  },
  "hours": {
    "message": "Uur"
@ -1928,7 +1928,7 @@
    "message": "Verwyder hoofwagwoord"
  },
  "removedMasterPassword": {
-    "message": "Hoofwagwoord is verwyder."
+    "message": "Hoofwagwoord is verwyder"
  },
  "convertOrganizationEncryptionDesc": {
    "message": "$ORGANIZATION$ gebruik SSO met ’n sleutelbediener op ’n eie gasheer. ’n Hoofwagwoord word nie meer vereis vir aantekening vir lede van hierdie organisasie nie.",
@ -2074,7 +2074,7 @@
    "message": "Premie-intekening word vereis"
  },
  "organizationIsDisabled": {
-    "message": "Organisasie is gedeaktiveer."
+    "message": "Organisasie is gedeaktiveer"
  },
  "disabledOrganizationFilterError": {
    "message": "Items in gedeaktiveerde organisasies is ontoeganklik. Kontak u organisasie-eienaar vir bystand."
@ -2247,23 +2247,23 @@
    }
  },
  "windowsBiometricUpdateWarning": {
-    "message": "Bitwarden recommends updating your biometric settings to require your master password (or PIN) on the first unlock. Would you like to update your settings now?"
+    "message": "Bitwarden beveel aan dat u u biometriese instellings bywerk om u hoofwagwoord (of PIN) by eerste ontgrendeling te vereis. Wil u nou u instellings bywerk?"
  },
  "windowsBiometricUpdateWarningTitle": {
-    "message": "Recommended Settings Update"
+    "message": "Aanbevole bywerking van instellings"
  },
  "region": {
-    "message": "Region"
+    "message": "Streek"
  },
  "eu": {
    "message": "EU",
    "description": "European Union"
  },
  "us": {
-    "message": "US",
+    "message": "VS",
    "description": "United States"
  },
  "selfHosted": {
-    "message": "Self-hosted"
+    "message": "Selghehuisves"
  }
 }
--- a/apps/desktop/src/locales/el/messages.json
+++ b/apps/desktop/src/locales/el/messages.json
@ -542,7 +542,7 @@
    "message": "Απαιτείται επιβεβαίωση του κύριου κωδικού."
  },
  "masterPasswordMinlength": {
-    "message": "Master password must be at least $VALUE$ characters long.",
+    "message": "Ο κύριος κωδικός πρέπει να έχει τουλάχιστον $VALUE$ χαρακτήρες μήκος.",
    "description": "The Master Password must be at least a specific number of characters long.",
    "placeholders": {
      "value": {
@ -771,7 +771,7 @@
    "message": "Επικοινωνία"
  },
  "helpAndFeedback": {
-    "message": "Help and feedback"
+    "message": "Βοήθεια και σχόλια"
  },
  "getHelp": {
    "message": "Ζητήστε Βοήθεια"
@ -1417,7 +1417,7 @@
    "message": "Require password or PIN on app start"
  },
  "recommendedForSecurity": {
-    "message": "Recommended for security."
+    "message": "Συνίσταται για ασφάλεια."
  },
  "lockWithMasterPassOnRestart": {
    "message": "Κλείδωμα με τον κύριο κωδικό πρόσβασης κατά την επανεκκίνηση"
@ -1540,7 +1540,7 @@
    "message": "Για να ολοκληρώσετε τη σύνδεση με SSO, ορίστε έναν κύριο κωδικό πρόσβασης για πρόσβαση και προστασία του vault σας."
  },
  "currentMasterPass": {
-    "message": "Current master password"
+    "message": "Τρέχων κύριος κωδικός"
  },
  "newMasterPass": {
    "message": "Νέος Κύριος Κωδικός"
@ -2250,17 +2250,17 @@
    "message": "Bitwarden recommends updating your biometric settings to require your master password (or PIN) on the first unlock. Would you like to update your settings now?"
  },
  "windowsBiometricUpdateWarningTitle": {
-    "message": "Recommended Settings Update"
+    "message": "Ενημέρωση Προτεινόμενων Ρυθμίσεων"
  },
  "region": {
-    "message": "Region"
+    "message": "Περιοχή"
  },
  "eu": {
-    "message": "EU",
+    "message": "ΕΕ",
    "description": "European Union"
  },
  "us": {
-    "message": "US",
+    "message": "ΗΠΑ",
    "description": "United States"
  },
  "selfHosted": {
--- a/apps/desktop/src/locales/pt_PT/messages.json
+++ b/apps/desktop/src/locales/pt_PT/messages.json
--- a/apps/desktop/src/locales/sl/messages.json
+++ b/apps/desktop/src/locales/sl/messages.json
@ -12,7 +12,7 @@
    "message": "Priljubljene"
  },
  "types": {
-    "message": "Tipi"
+    "message": "Vrste"
  },
  "typeLogin": {
    "message": "Prijava"
@ -36,7 +36,7 @@
    "message": "Išči v trezorju"
  },
  "addItem": {
-    "message": "Dodaj vnos"
+    "message": "Dodaj element"
  },
  "shared": {
    "message": "Deljeno"
@ -67,7 +67,7 @@
    "message": "Priloge"
  },
  "viewItem": {
-    "message": "Ogled vnosa"
+    "message": "Prikaži element"
  },
  "name": {
    "message": "Naziv"
@ -98,7 +98,7 @@
    "message": "Večbesedno geslo"
  },
  "editItem": {
-    "message": "Uredi vnos"
+    "message": "Uredi element"
  },
  "emailAddress": {
    "message": "E-poštni naslov"
@ -349,13 +349,13 @@
    "message": "Ime je obvezen podatek."
  },
  "addedItem": {
-    "message": "Vnos dodan"
+    "message": "Element dodan"
  },
  "editedItem": {
-    "message": "Vnos urejen"
+    "message": "Element urejen"
  },
  "deleteItem": {
-    "message": "Vnos odstranjen"
+    "message": "Element odstranjen"
  },
  "deleteFolder": {
    "message": "Izbriši mapo"
@ -367,7 +367,7 @@
    "message": "Ali res želite poslati v koš?"
  },
  "deletedItem": {
-    "message": "Pošlji vnos v smeti"
+    "message": "Pošlji element v smeti"
  },
  "overwritePasswordConfirmation": {
    "message": "Ali ste prepričani, da želite prepisati vaše trenutno geslo?"
@ -564,10 +564,10 @@
    "message": "An unexpected error has occurred."
  },
  "itemInformation": {
-    "message": "Informacije o vnosu"
+    "message": "Informacije o elementu"
  },
  "noItemsInList": {
-    "message": "Ni vnosov za prikaz."
+    "message": "Ni elementov za prikaz."
  },
  "sendVerificationCode": {
    "message": "Pošlji verifikacijsko kodo po e-pošti"
@ -1353,7 +1353,7 @@
    "message": "Lastništvo"
  },
  "whoOwnsThisItem": {
-    "message": "Kdo je lastnik tega vnosa?"
+    "message": "Kdo je lastnik tega elementa?"
  },
  "strong": {
    "message": "Močno",
@ -1922,7 +1922,7 @@
    "message": "One or more organization policies prevents you from exporting your personal vault."
  },
  "addAccount": {
-    "message": "Add account"
+    "message": "Dodaj račun"
  },
  "removeMasterPassword": {
    "message": "Odstranite glavno geslo"
--- a/apps/desktop/src/package-lock.json
+++ b/apps/desktop/src/package-lock.json
@ -1,12 +1,12 @@
 {
  "name": "@bitwarden/desktop",
-  "version": "2023.4.1",
+  "version": "2023.5.1",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@bitwarden/desktop",
-      "version": "2023.4.1",
+      "version": "2023.5.1",
      "license": "GPL-3.0",
      "dependencies": {
        "@bitwarden/desktop-native": "file:../desktop_native"
--- a/apps/desktop/src/package.json
+++ b/apps/desktop/src/package.json
@ -2,7 +2,7 @@
  "name": "@bitwarden/desktop",
  "productName": "Bitwarden",
  "description": "A secure and free password manager for all of your devices.",
-  "version": "2023.4.1",
+  "version": "2023.5.1",
  "author": "Bitwarden Inc. <hello@bitwarden.com> (https://bitwarden.com)",
  "homepage": "https://bitwarden.com",
  "license": "GPL-3.0",
--- a/apps/web/config/eudevtest.json
+++ b/apps/web/config/eudevtest.json
@ -0,0 +1,11 @@
+{
+  "urls": {
+    "icons": "https://icons.eudevtest.bitwarden.pw",
+    "notifications": "https://notifications.eudevtest.bitwarden.pw",
+    "scim": "https://scim.eudevtest.bitwarden.pw"
+  },
+  "flags": {
+    "secretsManager": true,
+    "showPasswordless": true
+  }
+}
--- a/apps/web/config/selfhosted.json
+++ b/apps/web/config/selfhosted.json
@ -8,6 +8,6 @@
  },
  "flags": {
    "secretsManager": false,
-    "showPasswordless": false
+    "showPasswordless": true
  }
 }
--- a/apps/web/package.json
+++ b/apps/web/package.json
@ -1,6 +1,6 @@
 {
  "name": "@bitwarden/web-vault",
-  "version": "2023.4.2",
+  "version": "2023.5.0",
  "scripts": {
    "build:oss": "webpack",
    "build:bit": "webpack -c ../../bitwarden_license/bit-web/webpack.config.js",
@ -11,6 +11,7 @@
    "build:bit:dev:watch": "cross-env ENV=development npm run build:bit:watch",
    "build:bit:qa": "cross-env NODE_ENV=production ENV=qa npm run build:bit",
    "build:bit:poc": "cross-env NODE_ENV=production ENV=poc npm run build:bit",
+    "build:bit:eudevtest": "cross-env NODE_ENV=production ENV=eudevtest npm run build:bit",
    "build:bit:cloud": "cross-env NODE_ENV=production ENV=cloud npm run build:bit",
    "build:oss:selfhost:watch": "cross-env ENV=selfhosted npm run build:oss:watch",
    "build:bit:selfhost:watch": "cross-env ENV=selfhosted npm run build:bit:watch",
--- a/apps/web/src/app/admin-console/organizations/members/components/reset-password.component.html
+++ b/apps/web/src/app/admin-console/organizations/members/components/reset-password.component.html
@ -3,7 +3,7 @@
    <form class="modal-content" #form (ngSubmit)="submit()" [appApiAction]="formPromise">
      <div class="modal-header">
        <h1 class="modal-title" id="resetPasswordTitle">
-          {{ "resetPassword" | i18n }}
+          {{ "recoverAccount" | i18n }}
          <small class="text-muted" *ngIf="name">{{ name }}</small>
        </h1>
        <button
--- a/apps/web/src/app/admin-console/organizations/members/people.component.html
+++ b/apps/web/src/app/admin-console/organizations/members/people.component.html
@ -214,10 +214,10 @@
              <ng-container *ngIf="showEnrolledStatus($any(u))">
                <i
                  class="bwi bwi-key"
-                  title="{{ 'enrolledPasswordReset' | i18n }}"
+                  title="{{ 'enrolledAccountRecovery' | i18n }}"
                  aria-hidden="true"
                ></i>
-                <span class="tw-sr-only">{{ "enrolledPasswordReset" | i18n }}</span>
+                <span class="tw-sr-only">{{ "enrolledAccountRecovery" | i18n }}</span>
              </ng-container>
            </td>
            <td bitCell>
@ -283,7 +283,7 @@
                  (click)="resetPassword(u)"
                  *ngIf="allowResetPassword(u)"
                >
-                  <i aria-hidden="true" class="bwi bwi-key"></i> {{ "resetPassword" | i18n }}
+                  <i aria-hidden="true" class="bwi bwi-key"></i> {{ "recoverAccount" | i18n }}
                </button>
                <button
                  type="button"
--- a/apps/web/src/app/admin-console/organizations/policies/reset-password.component.ts
+++ b/apps/web/src/app/admin-console/organizations/policies/reset-password.component.ts
@ -8,8 +8,8 @@ import { Organization } from "@bitwarden/common/admin-console/models/domain/orga
 import { BasePolicy, BasePolicyComponent } from "./base-policy.component";

 export class ResetPasswordPolicy extends BasePolicy {
-  name = "resetPasswordPolicy";
-  description = "resetPasswordPolicyDescription";
+  name = "accountRecoveryPolicy";
+  description = "accountRecoveryPolicyDescription";
  type = PolicyType.ResetPassword;
  component = ResetPasswordPolicyComponent;

--- a/apps/web/src/app/admin-console/organizations/tools/import-export/org-export.component.ts
+++ b/apps/web/src/app/admin-console/organizations/tools/import-export/org-export.component.ts
@ -54,6 +54,10 @@ export class OrganizationExportComponent extends ExportComponent {
    );
  }

+  protected get disabledByPolicy(): boolean {
+    return false;
+  }
+
  async ngOnInit() {
    // eslint-disable-next-line rxjs-angular/prefer-takeuntil, rxjs/no-async-subscribe
    this.route.parent.parent.params.subscribe(async (params) => {
@ -62,10 +66,6 @@ export class OrganizationExportComponent extends ExportComponent {
    await super.ngOnInit();
  }

-  async checkExportDisabled() {
-    return;
-  }
-
  getExportData() {
    if (this.isFileEncryptedExport) {
      return this.exportService.getPasswordProtectedExport(this.filePassword, this.organizationId);
--- a/apps/web/src/app/admin-console/organizations/tools/import-export/org-import.component.ts
+++ b/apps/web/src/app/admin-console/organizations/tools/import-export/org-import.component.ts
@ -1,13 +1,18 @@
 import { Component } from "@angular/core";
 import { ActivatedRoute, Router } from "@angular/router";
+import { switchMap, takeUntil } from "rxjs/operators";

 import { DialogServiceAbstraction, SimpleDialogType } from "@bitwarden/angular/services/dialog";
 import { ModalService } from "@bitwarden/angular/services/modal.service";
 import { I18nService } from "@bitwarden/common/abstractions/i18n.service";
 import { LogService } from "@bitwarden/common/abstractions/log.service";
 import { PlatformUtilsService } from "@bitwarden/common/abstractions/platformUtils.service";
-import { OrganizationService } from "@bitwarden/common/admin-console/abstractions/organization/organization.service.abstraction";
+import {
+  canAccessVaultTab,
+  OrganizationService,
+} from "@bitwarden/common/admin-console/abstractions/organization/organization.service.abstraction";
 import { PolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
+import { Organization } from "@bitwarden/common/admin-console/models/domain/organization";
 import { SyncService } from "@bitwarden/common/vault/abstractions/sync/sync.service.abstraction";
 import { ImportServiceAbstraction } from "@bitwarden/importer";

@ -19,7 +24,11 @@ import { ImportComponent } from "../../../../tools/import-export/import.componen
 })
 // eslint-disable-next-line rxjs-angular/prefer-takeuntil
 export class OrganizationImportComponent extends ImportComponent {
-  organizationName: string;
+  organization: Organization;
+
+  protected get importBlockedByPolicy(): boolean {
+    return false;
+  }

  constructor(
    i18nService: I18nService,
@ -47,21 +56,32 @@ export class OrganizationImportComponent extends ImportComponent {
    );
  }

-  async ngOnInit() {
-    // eslint-disable-next-line rxjs-angular/prefer-takeuntil, rxjs/no-async-subscribe
-    this.route.parent.parent.params.subscribe(async (params) => {
-      this.organizationId = params.organizationId;
-      this.successNavigate = ["organizations", this.organizationId, "vault"];
-      await super.ngOnInit();
-    });
-    const organization = await this.organizationService.get(this.organizationId);
-    this.organizationName = organization.name;
+  ngOnInit() {
+    this.route.params
+      .pipe(
+        switchMap((params) => this.organizationService.get$(params.organizationId)),
+        takeUntil(this.destroy$)
+      )
+      .subscribe((organization) => {
+        this.organizationId = organization.id;
+        this.organization = organization;
+      });
+    super.ngOnInit();
+  }
+
+  protected async onSuccessfulImport(): Promise<void> {
+    if (canAccessVaultTab(this.organization)) {
+      await this.router.navigate(["organizations", this.organizationId, "vault"]);
+    } else {
+      this.fileSelected = null;
+      this.fileContents = "";
+    }
  }

  async submit() {
    const confirmed = await this.dialogService.openSimpleDialog({
      title: { key: "warning" },
-      content: { key: "importWarning", placeholders: [this.organizationName] },
+      content: { key: "importWarning", placeholders: [this.organization.name] },
      type: SimpleDialogType.WARNING,
    });

--- a/apps/web/src/app/admin-console/organizations/users/enroll-master-password-reset.component.html
+++ b/apps/web/src/app/admin-console/organizations/users/enroll-master-password-reset.component.html
@ -14,7 +14,7 @@
    >
      <div class="modal-header">
        <h1 class="modal-title" id="enrollMasterPasswordResetTitle">
-          {{ "enrollPasswordReset" | i18n }}
+          {{ "enrollAccountRecovery" | i18n }}
        </h1>
        <button
          type="button"
--- a/apps/web/src/app/core/event.service.ts
+++ b/apps/web/src/app/core/event.service.ts
@ -75,7 +75,7 @@ export class EventService {
        msg = humanReadableMsg = this.i18nService.t("exportedVault");
        break;
      case EventType.User_UpdatedTempPassword:
-        msg = humanReadableMsg = this.i18nService.t("updatedMasterPassword");
+        msg = humanReadableMsg = this.i18nService.t("updatedTempPassword");
        break;
      case EventType.User_MigratedKeyToKeyConnector:
        msg = humanReadableMsg = this.i18nService.t("migratedKeyConnector");
@ -259,16 +259,16 @@ export class EventService {
        );
        break;
      case EventType.OrganizationUser_ResetPassword_Enroll:
-        msg = this.i18nService.t("eventEnrollPasswordReset", this.formatOrgUserId(ev));
+        msg = this.i18nService.t("eventEnrollAccountRecovery", this.formatOrgUserId(ev));
        humanReadableMsg = this.i18nService.t(
-          "eventEnrollPasswordReset",
+          "eventEnrollAccountRecovery",
          this.getShortId(ev.organizationUserId)
        );
        break;
      case EventType.OrganizationUser_ResetPassword_Withdraw:
-        msg = this.i18nService.t("eventWithdrawPasswordReset", this.formatOrgUserId(ev));
+        msg = this.i18nService.t("eventWithdrawAccountRecovery", this.formatOrgUserId(ev));
        humanReadableMsg = this.i18nService.t(
-          "eventWithdrawPasswordReset",
+          "eventWithdrawAccountRecovery",
          this.getShortId(ev.organizationUserId)
        );
        break;
--- a/apps/web/src/app/tools/import-export/import.component.ts
+++ b/apps/web/src/app/tools/import-export/import.component.ts
@ -1,7 +1,8 @@
-import { Component, OnInit } from "@angular/core";
+import { Component, OnDestroy, OnInit } from "@angular/core";
 import { Router } from "@angular/router";
 import * as JSZip from "jszip";
-import { firstValueFrom } from "rxjs";
+import { Subject } from "rxjs";
+import { takeUntil } from "rxjs/operators";
 import Swal, { SweetAlertIcon } from "sweetalert2";

 import { DialogServiceAbstraction } from "@bitwarden/angular/services/dialog";
@ -14,28 +15,29 @@ import { PolicyType } from "@bitwarden/common/admin-console/enums";
 import { SyncService } from "@bitwarden/common/vault/abstractions/sync/sync.service.abstraction";
 import {
  ImportOption,
-  ImportType,
  ImportResult,
  ImportServiceAbstraction,
+  ImportType,
 } from "@bitwarden/importer";

-import { ImportSuccessDialogComponent, FilePasswordPromptComponent } from "./dialog";
+import { FilePasswordPromptComponent, ImportSuccessDialogComponent } from "./dialog";

@Component({
  selector: "app-import",
  templateUrl: "import.component.html",
 })
-export class ImportComponent implements OnInit {
+export class ImportComponent implements OnInit, OnDestroy {
  featuredImportOptions: ImportOption[];
  importOptions: ImportOption[];
  format: ImportType = null;
  fileContents: string;
  fileSelected: File;
  loading = false;
-  importBlockedByPolicy = false;

  protected organizationId: string = null;
-  protected successNavigate: any[] = ["vault"];
+  protected destroy$ = new Subject<void>();
+
+  private _importBlockedByPolicy = false;

  constructor(
    protected i18nService: I18nService,
@ -49,12 +51,26 @@ export class ImportComponent implements OnInit {
    protected dialogService: DialogServiceAbstraction
  ) {}

-  async ngOnInit() {
+  protected get importBlockedByPolicy(): boolean {
+    return this._importBlockedByPolicy;
+  }
+
+  /**
+   * Callback that is called after a successful import.
+   */
+  protected async onSuccessfulImport(): Promise<void> {
+    await this.router.navigate(["vault"]);
+  }
+
+  ngOnInit() {
    this.setImportOptions();

-    this.importBlockedByPolicy = await firstValueFrom(
-      this.policyService.policyAppliesToActiveUser$(PolicyType.PersonalOwnership)
-    );
+    this.policyService
+      .policyAppliesToActiveUser$(PolicyType.PersonalOwnership)
+      .pipe(takeUntil(this.destroy$))
+      .subscribe((policyAppliesToActiveUser) => {
+        this._importBlockedByPolicy = policyAppliesToActiveUser;
+      });
  }

  async submit() {
@ -134,7 +150,7 @@ export class ImportComponent implements OnInit {
      });

      this.syncService.fullSync(true);
-      this.router.navigate(this.successNavigate);
+      await this.onSuccessfulImport();
    } catch (e) {
      this.error(e);
      this.logService.error(e);
@ -264,4 +280,9 @@ export class ImportComponent implements OnInit {

    return await ref.onClosedPromise();
  }
+
+  ngOnDestroy(): void {
+    this.destroy$.next();
+    this.destroy$.complete();
+  }
 }
--- a/apps/web/src/app/vault/individual-vault/vault-filter/components/organization-options.component.html
+++ b/apps/web/src/app/vault/individual-vault/vault-filter/components/organization-options.component.html
@ -18,7 +18,7 @@
    (click)="toggleResetPasswordEnrollment(organization)"
  >
    <i class="bwi bwi-fw bwi-key" aria-hidden="true"></i>
-    {{ "enrollPasswordReset" | i18n }}
+    {{ "enrollAccountRecovery" | i18n }}
  </button>
  <button
    type="button"
@ -27,7 +27,7 @@
    (click)="toggleResetPasswordEnrollment(organization)"
  >
    <i class="bwi bwi-fw bwi-undo" aria-hidden="true"></i>
-    {{ "withdrawPasswordReset" | i18n }}
+    {{ "withdrawAccountRecovery" | i18n }}
  </button>
  <ng-container *ngIf="organization.useSso && organization.identifier">
    <button
--- a/apps/web/src/locales/af/messages.json
+++ b/apps/web/src/locales/af/messages.json
@ -507,7 +507,7 @@
    "message": "Is u seker u wil hierdie aanhegsel skrap?"
  },
  "attachmentSaved": {
-    "message": "Die aanhegsel is bewaar."
+    "message": "Die aanhegsel is bewaar"
  },
  "file": {
    "message": "Lêer"
@ -586,10 +586,10 @@
    "message": "Geskrapte vouer"
  },
  "editInfo": {
-    "message": "Edit info"
+    "message": "Wysig inligting"
  },
  "access": {
-    "message": "Access"
+    "message": "Toegang"
  },
  "loggedOut": {
    "message": "Uitgeteken"
@ -622,7 +622,7 @@
    "message": "Teken aan met toestel moet in die instellings van die Bitwarden-toep geaktiveer word. Kort u nog ’n opsie?"
  },
  "loginWithMasterPassword": {
-    "message": "Log in with master password"
+    "message": "Teken aan met hoofwagwoord"
  },
  "createAccount": {
    "message": "Skep rekening"
@ -697,7 +697,7 @@
    "message": "Hoofwagwoord moet weer ingevoer word."
  },
  "masterPasswordMinlength": {
-    "message": "Master password must be at least $VALUE$ characters long.",
+    "message": "Hoofwagwoord moet ten minste $VALUE$ karakters lank wees.",
    "description": "The Master Password must be at least a specific number of characters long.",
    "placeholders": {
      "value": {
@ -924,7 +924,7 @@
    }
  },
  "deleteSelectedConfirmation": {
-    "message": "Are you sure you want to continue?"
+    "message": "Is u seker u wil voortgaan?"
  },
  "moveSelectedItemsDesc": {
    "message": "Kies ’n vouer waarheen u die $COUNT$ gekose item(s) heen wil skuif.",
@ -1010,7 +1010,7 @@
    "message": "Export type"
  },
  "accountRestricted": {
-    "message": "Account restricted"
+    "message": "Rekening beperk"
  },
  "passwordProtected": {
    "message": "Password protected"
@ -1025,7 +1025,7 @@
    "message": "This file is password-protected. Please enter the file password to import data."
  },
  "exportSuccess": {
-    "message": "U kluisdata is uitgestuur."
+    "message": "U kluisdata is uitgestuur"
  },
  "passwordGenerator": {
    "message": "Wagwoordgenereerder"
@ -1250,7 +1250,7 @@
    "message": "Invoerfout"
  },
  "importErrorDesc": {
-    "message": "There was a problem with the data you tried to import. Please resolve the errors listed below in your source file and try again."
+    "message": "Daar was ’n probleem met die data wat u probeer invoer het. Los asb. alle probleme in die lys, in u bronlêer op en probeer weer."
  },
  "importSuccess": {
    "message": "Data is suksesvol na u kluis ingevoer."
@ -1390,7 +1390,7 @@
    "message": "Two-step Login Enforcement"
  },
  "twoStepLoginDesc": {
-    "message": "Secure your account by requiring an additional step when logging in."
+    "message": "Beveilig u rekening deur ’n bykomende stap te vereis wanneer u aanteken."
  },
  "twoStepLoginOrganizationDescStart": {
    "message": "Enforce Bitwarden Two-step Login options for members by using the ",
@ -1465,7 +1465,7 @@
    "message": "Laai ’n tweestapwaarmerktoep af"
  },
  "twoStepAuthenticatorNeedApp": {
-    "message": "Need a two-step authenticator app? Download one of the following"
+    "message": "Kort u ’n tweestapwaarmerktoep? Laai een van die volgende af"
  },
  "iosDevices": {
    "message": "iOS-toestelle"
@ -2212,7 +2212,7 @@
    "message": "Organisasienaam"
  },
  "accountOwnedBusiness": {
-    "message": "This account is owned by a business."
+    "message": "Hierdie rekening word deur ’n besigheid besit."
  },
  "billingEmail": {
    "message": "Billing email"
@ -2427,7 +2427,7 @@
    "message": "Is u seker u wil hierdie organisasie verlaat?"
  },
  "leftOrganization": {
-    "message": "U het die organisasie verlaat."
+    "message": "U het die organisasie verlaat"
  },
  "defaultCollection": {
    "message": "Verstekversameling"
@ -2580,7 +2580,7 @@
    "message": "Eienaar"
  },
  "ownerDesc": {
-    "message": "Manage all aspects of your organization, including billing and subscriptions"
+    "message": "Bestuur alle aspekte van u organisasie, insluitend fakturering en intekeninge"
  },
  "clientOwnerDesc": {
    "message": "This user should be independent of the Provider. If the Provider is disassociated with the organization, this user will maintain ownership of the organization."
@ -2589,7 +2589,7 @@
    "message": "Admin"
  },
  "adminDesc": {
-    "message": "Manage organization access, all collections, members, reporting, and security settings"
+    "message": "Bestuur organisasietoegang, alle versamelings, lede, verslagdoening en sekuriteitsinstellings"
  },
  "user": {
    "message": "Gebruiker"
@ -2637,16 +2637,16 @@
    "message": "Webkluis"
  },
  "loggedIn": {
-    "message": "Aangeteken."
+    "message": "Aangeteken"
  },
  "changedPassword": {
-    "message": "Rekeningwagwoord is verander."
+    "message": "Rekeningwagwoord is verander"
  },
  "enabledUpdated2fa": {
-    "message": "Tweestapaantekening geaktiveer/bygewerk."
+    "message": "Tweestapaantekening geaktiveer/bygewerk"
  },
  "disabled2fa": {
-    "message": "Tweestapaantekening gedeaktiveer."
+    "message": "Tweestapaantekening gedeaktiveer"
  },
  "recovered2fa": {
    "message": "Recovered account from two-step login."
@ -2658,7 +2658,7 @@
    "message": "Login attempt failed with incorrect two-step login."
  },
  "exportedVault": {
-    "message": "Kluis uitgestuur."
+    "message": "Kluis uitgestuur"
  },
  "exportedOrganizationVault": {
    "message": "Organisasiekluis uitgestuur."
@ -2751,7 +2751,7 @@
    }
  },
  "viewCollectionWithName": {
-    "message": "View collection - $NAME$",
+    "message": "Bekyk versameling - $NAME$",
    "placeholders": {
      "name": {
        "content": "$1",
@ -2760,7 +2760,7 @@
    }
  },
  "editItemWithName": {
-    "message": "Edit item - $NAME$",
+    "message": "Wysig item - $NAME$",
    "placeholders": {
      "name": {
        "content": "$1",
@ -2823,7 +2823,7 @@
    }
  },
  "deletedCollections": {
-    "message": "Deleted collections"
+    "message": "Geskrapte versamelings"
  },
  "deletedCollectionId": {
    "message": "Versameling $ID$ geskrap.",
@ -2871,7 +2871,7 @@
    }
  },
  "deletedManyGroups": {
-    "message": "Deleted $QUANTITY$ group(s).",
+    "message": "$QUANTITY$ groepe geskrap",
    "placeholders": {
      "quantity": {
        "content": "$1",
@ -3057,7 +3057,7 @@
    "message": "Wysig die groepe waaraan hierdie gebruiker behoort."
  },
  "invitedUsers": {
-    "message": "Gebruiker(s) genooi."
+    "message": "Gebruiker(s) genooi"
  },
  "resendInvitation": {
    "message": "Stuur weer uitnodiging"
@ -3186,7 +3186,7 @@
    "message": "My Organisasie"
  },
  "organizationInfo": {
-    "message": "Organization info"
+    "message": "Organisasie-inligting"
  },
  "deleteOrganization": {
    "message": "Skrap Organisasie"
@ -3514,7 +3514,7 @@
    "description": "ex. Date this item was updated"
  },
  "dateCreated": {
-    "message": "Created",
+    "message": "Geskep",
    "description": "ex. Date this item was created"
  },
  "datePasswordUpdated": {
@ -3598,7 +3598,7 @@
    "message": "Please make sure your vault is unlocked and Fingerprint phrase matches the other device."
  },
  "fingerprintPhraseHeader": {
-    "message": "Fingerprint phrase"
+    "message": "Vingerafdrukfrase"
  },
  "dontAskFingerprintAgain": {
    "message": "Moenie weer vra om die vingerafdrukfrase te bevestig nie",
@ -3867,7 +3867,7 @@
    "message": "Onderneming-enkelaanteken"
  },
  "ssoHandOff": {
-    "message": "You may now close this tab and continue in the extension."
+    "message": "U mag nou hierdie oortjie sluit en voortgaan in die uitbreiding."
  },
  "includeAllTeamsFeatures": {
    "message": "Alle Spanne-funksies, plus:"
@ -3885,7 +3885,7 @@
    "message": "Organisasie-identifiseerder word benodig."
  },
  "ssoIdentifier": {
-    "message": "SSO identifier"
+    "message": "SSO-identifiseerder"
  },
  "ssoIdentifierHint": {
    "message": "Provide this ID to your members to login with SSO."
@ -4066,7 +4066,7 @@
    "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
  },
  "missingSendFile": {
-    "message": "The file associated with this Send could not be found.",
+    "message": "Die lêer wat met hierdie send geassosieer is kan nie gevind word nie.",
    "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
  },
  "noSendsInList": {
@ -4201,10 +4201,10 @@
    }
  },
  "emergencyApproved": {
-    "message": "Noodtoegang goedgekeur."
+    "message": "Noodtoegang goedgekeur"
  },
  "emergencyRejected": {
-    "message": "Noodtoegang afgekeur."
+    "message": "Noodtoegang afgekeur"
  },
  "passwordResetFor": {
    "message": "Password reset for $USER$. You can now login using the new password.",
@ -4307,7 +4307,7 @@
    "message": "Toestemmings"
  },
  "permission": {
-    "message": "Permission"
+    "message": "Toestemming"
  },
  "managerPermissions": {
    "message": "Manager Permissions"
@ -4415,7 +4415,7 @@
    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read '**Learn more about** Bitwarden Send or sign up to try it today.'"
  },
  "sendVaultCardProductDesc": {
-    "message": "Share text or files directly with anyone."
+    "message": "Deel teks of lêers rirek met enigeen."
  },
  "sendVaultCardLearnMore": {
    "message": "Leer meer",
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "U wagwoordwenk kan nie dieselfde as u wagwoord wees nie."
  },
-  "enrollPasswordReset": {
-    "message": "Skryf in vir wagwoordterugstel"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Ingeskryf vir wagwoordterugstel"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Suksesvol ingeskryf!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Gebruiker $ID$ het vir wagwoordterugstelbystand ingeskryf.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Inskrywing stel organisasiebeheerders in staat om y hoofwagwoord te wysig. Is u seker u wil inskryf?"
  },
-  "resetPasswordPolicy": {
-    "message": "Bestuur wagwoordherstel"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Gebruikers in die organisasie sal self moet inskryf of moet outomaties ingeskryf word voor beheerders hul hoofwagwoord sal kan terugstel."
@ -4625,7 +4625,7 @@
    "message": "Stuur weer uitnodigings"
  },
  "resendNotification": {
-    "message": "Resend notification"
+    "message": "Stuur weer kennisgewing"
  },
  "noSelectedUsersApplicable": {
    "message": "Hierdie aktie is nie van toepassing op die gekose gebruikers nie."
@ -4661,10 +4661,10 @@
    "message": "Grootmaataksie status"
  },
  "bulkConfirmMessage": {
-    "message": "Suksesvol bevestig."
+    "message": "Suksesvol bevestig"
  },
  "bulkReinviteMessage": {
-    "message": "Suksesvol heruitgenooi."
+    "message": "Suksesvol heruitgenooi"
  },
  "bulkRemovedMessage": {
    "message": "Suksesvol verwyder"
@ -4676,7 +4676,7 @@
    "message": "Restored organization access successfully"
  },
  "bulkFilteredMessage": {
-    "message": "Uitgesluit, nie van toepassing vir hierdie aksie."
+    "message": "Uitgesluit, nie van toepassing vir hierdie aksie"
  },
  "fingerprint": {
    "message": "Vingerafdruk"
@ -5197,7 +5197,7 @@
    "message": "Verwyder hoofwagwoord"
  },
  "removedMasterPassword": {
-    "message": "Hoofwagwoord is verwyder."
+    "message": "Hoofwagwoord is verwyder"
  },
  "allowSso": {
    "message": "Staan SSO-waarmerking toe"
@ -5326,7 +5326,7 @@
    "message": "To set-up your organization on your own server, you will need to upload your license file. To support Free Families plans and advanced billing capabilities for your self-hosted organization, you will need to set up billing sync."
  },
  "billingSyncApiKeyRotated": {
-    "message": "Teken is geroteer."
+    "message": "Teken is geroteer"
  },
  "billingSyncDesc": {
    "message": "Billing sync unlocks Families sponsorships and automatic license syncing on your server. After making updates in the Bitwarden cloud server, select Sync License to apply changes."
@ -5752,19 +5752,19 @@
    "message": "Avatar opgedateer"
  },
  "brightBlue": {
-    "message": "Bright Blue"
+    "message": "Helderblou"
  },
  "green": {
-    "message": "Green"
+    "message": "Groen"
  },
  "orange": {
-    "message": "Orange"
+    "message": "Oranje"
  },
  "lavender": {
-    "message": "Lavender"
+    "message": "Laventel"
  },
  "yellow": {
-    "message": "Yellow"
+    "message": "Geel"
  },
  "indigo": {
    "message": "Indigo"
@ -5808,7 +5808,7 @@
    "message": "Hide"
  },
  "projects": {
-    "message": "Projects",
+    "message": "Projekte",
    "description": "Description for the Projects field."
  },
  "lastEdited": {
@ -5832,11 +5832,11 @@
    "description": "Action to copy the value of a secret to the system's clipboard."
  },
  "deleteSecret": {
-    "message": "Delete secret",
+    "message": "Skrap geheim",
    "description": "Action to delete a single secret from the system."
  },
  "deleteSecrets": {
-    "message": "Delete secrets",
+    "message": "Skrap geheime",
    "description": "The action to delete multiple secrets from the system."
  },
  "hardDeleteSecret": {
@ -5858,39 +5858,39 @@
    "description": "Label for the search bar used to search projects."
  },
  "project": {
-    "message": "Project",
+    "message": "Projek",
    "description": "Similar to collections, projects can be used to group secrets."
  },
  "editProject": {
-    "message": "Edit project",
+    "message": "Wysig projek",
    "description": "The action to modify an existing project."
  },
  "viewProject": {
-    "message": "View project",
+    "message": "Bekyk projek",
    "description": "The action to view details of a project."
  },
  "deleteProject": {
-    "message": "Delete project",
+    "message": "Skrap projek",
    "description": "The action to delete a project from the system."
  },
  "deleteProjects": {
-    "message": "Delete projects",
+    "message": "Skrap projekte",
    "description": "The action to delete multiple projects from the system."
  },
  "secret": {
-    "message": "Secret",
+    "message": "Geheim",
    "description": "Label for a secret (key/value pair)"
  },
  "serviceAccount": {
-    "message": "Service account",
+    "message": "Diensrekening",
    "description": "A machine user which can be used to automate processes and access secrets in the system."
  },
  "serviceAccounts": {
-    "message": "Service accounts",
+    "message": "Diensrekeninge",
    "description": "The title for the section that deals with service accounts."
  },
  "secrets": {
-    "message": "Secrets",
+    "message": "Geheime",
    "description": "The title for the section of the application that deals with secrets."
  },
  "nameValuePair": {
@ -5906,11 +5906,11 @@
    "description": "Notification for the successful creation of a secret."
  },
  "newSecret": {
-    "message": "New secret",
+    "message": "Nuwe geheim",
    "description": "Title for creating a new secret."
  },
  "newServiceAccount": {
-    "message": "New service account",
+    "message": "Nuwe diensrekening",
    "description": "Title for creating a new service account."
  },
  "secretsNoItemsTitle": {
@ -6000,11 +6000,11 @@
    "description": "Notification for the successful creation of a project."
  },
  "projectName": {
-    "message": "Project name",
+    "message": "Projeknaam",
    "description": "Label for entering the name of a project."
  },
  "newProject": {
-    "message": "New project",
+    "message": "Nuwe projek",
    "description": "Title for creating a new project."
  },
  "softDeleteSecretWarning": {
@ -6029,7 +6029,7 @@
    "description": "Title indicating what permissions a service account has"
  },
  "projectCommaSecret": {
-    "message": "Project, Secret",
+    "message": "Projek, geheim",
    "description": ""
  },
  "serviceAccountName": {
@ -6211,13 +6211,13 @@
    "message": "To"
  },
  "member": {
-    "message": "Member"
+    "message": "Lid"
  },
  "update": {
    "message": "Update"
  },
  "plusNMore": {
-    "message": "+ $QUANTITY$ more",
+    "message": "+ nog $QUANTITY$",
    "placeholders": {
      "quantity": {
        "content": "$1",
@ -6226,7 +6226,7 @@
    }
  },
  "groupInfo": {
-    "message": "Group info"
+    "message": "Groepinligting"
  },
  "editGroupMembersDesc": {
    "message": "Grant members access to the group's assigned collections."
@ -6241,22 +6241,22 @@
    "message": "If checked, this will replace all other collection permissions."
  },
  "selectMembers": {
-    "message": "Select members"
+    "message": "Kies lede"
  },
  "selectCollections": {
-    "message": "Select collections"
+    "message": "Kies versamelings"
  },
  "role": {
-    "message": "Role"
+    "message": "Rol"
  },
  "removeMember": {
-    "message": "Remove member"
+    "message": "Verwyder lid"
  },
  "collection": {
-    "message": "Collection"
+    "message": "Versameling"
  },
  "noCollection": {
-    "message": "No collection"
+    "message": "Geen versameling"
  },
  "canView": {
    "message": "Can view"
@ -6280,7 +6280,7 @@
    "message": "No groups added"
  },
  "group": {
-    "message": "Group"
+    "message": "Groep"
  },
  "groupAccessAll": {
    "message": "This group can access and modify all items."
@ -6370,7 +6370,7 @@
    "message": "Unverified"
  },
  "domainNameTh": {
-    "message": "Name"
+    "message": "Naam"
  },
  "domainStatusTh": {
    "message": "Status"
@ -6421,10 +6421,10 @@
    }
  },
  "membersColumnHeader": {
-    "message": "Member/Group"
+    "message": "Lid/Groep"
  },
  "groupAndMemberColumnHeader": {
-    "message": "Member"
+    "message": "Lid"
  },
  "selectGroupsAndMembers": {
    "message": "Select groups and members"
@ -6439,7 +6439,7 @@
    "message": "No members or groups added"
  },
  "deleted": {
-    "message": "Deleted"
+    "message": "Geskrap"
  },
  "memberStatusFilter": {
    "message": "Member status filter"
@ -6460,7 +6460,7 @@
    "message": "Switch products"
  },
  "freeOrgInvLimitReachedManageBilling": {
-    "message": "Free organizations may have up to $SEATCOUNT$ members. Upgrade to a paid plan to invite more members.",
+    "message": "Gratis organisasies kan tot $SEATCOUNT$ lede hê. Gradeer op na ’n betaalde plan om nog lede uit te nooi.",
    "placeholders": {
      "seatcount": {
        "content": "$1",
@ -6469,7 +6469,7 @@
    }
  },
  "freeOrgInvLimitReachedNoManageBilling": {
-    "message": "Free organizations may have up to $SEATCOUNT$ members. Contact your organization owner to upgrade.",
+    "message": "Gratis organisasies kan tot $SEATCOUNT$ lede hê. Kontak u organisasie-eienaar om op te gradeer.",
    "placeholders": {
      "seatcount": {
        "content": "$1",
@ -6478,7 +6478,7 @@
    }
  },
  "freeOrgMaxCollectionReachedManageBilling": {
-    "message": "Free organizations may have up to $COLLECTIONCOUNT$ collections. Upgrade to a paid plan to add more collections.",
+    "message": "Gratis organisasies kan tot $COLLECTIONCOUNT$ versamelings hê. Gradeer op na ’n betaalde plan om nog versamelings toe te voeg.",
    "placeholders": {
      "COLLECTIONCOUNT": {
        "content": "$1",
@ -6487,7 +6487,7 @@
    }
  },
  "freeOrgMaxCollectionReachedNoManageBilling": {
-    "message": "Free organizations may have up to $COLLECTIONCOUNT$ collections. Contact your organization owner to upgrade.",
+    "message": "Gratis organisasies kan tot $COLLECTIONCOUNT$ versamelings hê. Kontak u organisasie-eienaar om op te gradeer.",
    "placeholders": {
      "COLLECTIONCOUNT": {
        "content": "$1",
@ -6496,7 +6496,7 @@
    }
  },
  "server": {
-    "message": "Server"
+    "message": "Bediener"
  },
  "exportData": {
    "message": "Export data"
@ -6565,7 +6565,7 @@
    }
  },
  "uploadLicense": {
-    "message": "Upload license"
+    "message": "Laai lisensie op"
  },
  "projectPeopleDescription": {
    "message": "Grant groups or people access to this project."
@ -6598,7 +6598,7 @@
    "message": "Can read, write"
  },
  "groupSlashUser": {
-    "message": "Group/User"
+    "message": "Groep/Gebruiker"
  },
  "lowKdfIterations": {
    "message": "Low KDF Iterations"
@ -6619,7 +6619,7 @@
    "message": "This user can access the Secrets Manager Beta"
  },
  "important": {
-    "message": "Important:"
+    "message": "Belangrik:"
  },
  "viewAll": {
    "message": "View all"
@ -6660,13 +6660,13 @@
    "description": "Software Development Kit"
  },
  "createSecret": {
-    "message": "Create a secret"
+    "message": "Skep ’n geheim"
  },
  "createProject": {
-    "message": "Create a project"
+    "message": "Skep ’n projek"
  },
  "createServiceAccount": {
-    "message": "Create a service account"
+    "message": "Skep ’n diensrekening"
  },
  "downloadThe": {
    "message": "Download the",
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6789,7 +6793,7 @@
    "message": "Require existing members to change their passwords"
  },
  "region": {
-    "message": "Region"
+    "message": "Streek"
  },
  "eu": {
    "message": "EU",
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/ar/messages.json
+++ b/apps/web/src/locales/ar/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "تم التسجيل بنجاح!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "تم الانسحاب بنجاح!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/az/messages.json
+++ b/apps/web/src/locales/az/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Parol məsləhəti, parolunuzla eyni ola bilməz."
  },
-  "enrollPasswordReset": {
-    "message": "\"Parol sıfırlama\" üzrə qeydiyyat"
+  "enrollAccountRecovery": {
+    "message": "Hesab bərpasında qeydiyyatdan keçin"
  },
-  "enrolledPasswordReset": {
-    "message": "\"Parol sıfırlama\" üzrə qeydiyyat tamamlandı"
+  "enrolledAccountRecovery": {
+    "message": "Hesab bərpasında qeydiyyatdan keçildi"
  },
-  "withdrawPasswordReset": {
-    "message": "\"Parol sıfırlama\"dan çıx"
+  "withdrawAccountRecovery": {
+    "message": "Hesab bərpasından çəkil"
  },
  "enrollPasswordResetSuccess": {
    "message": "Qeydiyyat uğurludur!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Çıxma uğurludur!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "$ID$ istifadəçisi parol sıfırlama dəstəyi üçün qeydiyyatdan keçdi.",
+  "eventEnrollAccountRecovery": {
+    "message": "$ID$ istifadəçisi hesab bərpasında qeydiyyatdan keçdi.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "$ID$ istifadəçisi parol sıfırlama dəstəyindən çıxdı.",
+  "eventWithdrawAccountRecovery": {
+    "message": "$ID$ istifadəçisi hesab bərpasından çəkildi.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Qeydiyyat, təşkilat administratorlarına ana parolunuzu dəyişdirmə icazəsi verəcək. Qeydiyyatdan keçmək istədiyinizə əminsiniz?"
  },
-  "resetPasswordPolicy": {
-    "message": "Ana parol sıfırlama"
+  "accountRecoveryPolicy": {
+    "message": "Hesab bərpa idarəsi"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Təşkilatdakı administratorların, təşkilat istifadəçilərinin ana parolu sıfırlamağına icazə verin."
+  "accountRecoveryPolicyDescription": {
+    "message": "Ana parol və ya güvənilən cihazlar unudulanda və ya itəndə üzv hesablarını bərpa edin. Bərpa prosesləri, hesab şifrələmə üsuluna əsaslanır."
  },
  "resetPasswordPolicyWarning": {
    "message": "Administratorların ana parolları sıfırlaya bilməsi üçün təşkilatdakı istifadəçilər öz-özünə və ya avtomatik olaraq qeydiyyatdan keçməlidir."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Giriş, yalnız boşluq ehtiva etməməlidir.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Rədd et"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Güvənli cihaz şifrələməsi"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Kimlik təsdiqləndikdən sonra üzvlər, cihazlarından saxlanılan açarı istifadə edərək anbar verilənlərinin şifrələrini aça biləcək.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "ana parol sıfırlama siyasəti",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "Hesab bərpa idarəsi siyasəti",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "Bu seçim istifadə edildikdə avto-qeydiyyat ilə işə salınacaq.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Hesabı bərpa et"
+  },
+  "updatedTempPassword": {
+    "message": "İstifadəçi, hesab bərpası vasitəsilə verilən bir parolu güncəllədi."
  }
 }
--- a/apps/web/src/locales/be/messages.json
+++ b/apps/web/src/locales/be/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Падказка для пароля не можа супадаць з паролем."
  },
-  "enrollPasswordReset": {
-    "message": "Зарэгістравацца на скіданне пароля"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Зарэгістраваны на скіданне пароля"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Адмова ад скідання пароля"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Паспяховая рэгістрацыя!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Адмова паспяхова ўжыта!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Карыстальнік $ID$ падаў запыт, каб атрымаць дапамогу ў скіданні пароля.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Карыстальнік $ID$ адмовіўся ад дапамогі ў скіданні пароля.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Рэгістрацыя дазволіць адміністратарам арганізацыі змяняць ваш асноўны пароль"
  },
-  "resetPasswordPolicy": {
-    "message": "Скіданне асноўнага пароля"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Дазволіць адміністратарам скідаць асноўны пароль для ўдзельнікаў."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Карыстальнікі арганізацыі павінны зарэгістравацца самастойна або быць зарэгістраванымі аўтаматычна, каб адміністратары маглі скінуць іх асноўны пароль."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Адхіліць"
  },
@ -6792,11 +6796,11 @@
    "message": "Region"
  },
  "eu": {
-    "message": "EU",
+    "message": "ЕС",
    "description": "European Union"
  },
  "us": {
-    "message": "US",
+    "message": "ЗША",
    "description": "United States"
  },
  "smProjectDeleteAccessRestricted": {
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Шыфраванне даверанай прылады"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Пасля аўтэнтыфікацыі ўдзельнікі расшыфроўваюць даныя сховішча з выкарыстаннем ключа, якія захоўваецца на іх прыладах",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "палітыка скідання асноўнага пароля",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "уключаецца палітыка скідання асноўнага пароля з аўтаматычнай рэгістрацыяй.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "with automatic enrollment will turn on when this option is used.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/bg/messages.json
+++ b/apps/web/src/locales/bg/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Подсказването за паролата не може да съвпада с нея."
  },
-  "enrollPasswordReset": {
-    "message": "Включване на помощта при смяната на паролата"
+  "enrollAccountRecovery": {
+    "message": "Включване във възстановяването на профили"
  },
-  "enrolledPasswordReset": {
-    "message": "Помощта при смяната на паролата е включена"
+  "enrolledAccountRecovery": {
+    "message": "Включен във възстановяването на профили"
  },
-  "withdrawPasswordReset": {
-    "message": "Изключване на помощта при смяната на паролата"
+  "withdrawAccountRecovery": {
+    "message": "Оттегляне от възстановяването на профили"
  },
  "enrollPasswordResetSuccess": {
    "message": "Успешно включване!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Успешно изключване!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Потребителят $ID$ включи помощта при смяна на паролата.",
+  "eventEnrollAccountRecovery": {
+    "message": "Потребителят $ID$ се включи във възстановяването на профили.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Потребителят $ID$ изключи помощта при смяна на паролата.",
+  "eventWithdrawAccountRecovery": {
+    "message": "Потребителят $ID$ се оттегли от възстановяването на профили.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Включването ще позволи на администраторите на организацията да променят главната Ви парола. Наистина ли искате да се включите?"
  },
-  "resetPasswordPolicy": {
-    "message": "Смяна на главната парола"
+  "accountRecoveryPolicy": {
+    "message": "Управление на възстановяването на профили"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Позволяване на администраторите на организацията да сменят главните пароли на участващите потребители."
+  "accountRecoveryPolicyDescription": {
+    "message": "Можете да възстановявате профилите на потребителите, когато загубят или забравят своята главна парола или доверено устройство. Процесът по възстановяване се основава на метод на шифроване на профила."
  },
  "resetPasswordPolicyWarning": {
    "message": "Потребителите в организацията ще трябва да се включат сами или да бъдат включени автоматично, преди администраторите да могат да сменят главните им пароли."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Въведеното не може да съдържа само интервали.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Шифроване чрез доверено устройство"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "След вписване, членовете ще дешифрират данните от трезорите си чрез ключ, който се съхранява на устройство.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "Политиката за смяна на главната парола",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "Политиката за управление на възстановяването на профили",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "с автоматично включване ще бъде активирана при използването на тази настройка.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Възстановяване на профила"
+  },
+  "updatedTempPassword": {
+    "message": "Потребителят промени парола издадена чрез възстановяването на профили."
  }
 }
--- a/apps/web/src/locales/bn/messages.json
+++ b/apps/web/src/locales/bn/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/bs/messages.json
+++ b/apps/web/src/locales/bs/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/ca/messages.json
+++ b/apps/web/src/locales/ca/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "El vostre suggeriment de contrasenya no pot ser el mateix que la vostra contrasenya."
  },
-  "enrollPasswordReset": {
-    "message": "Inscriviu-vos al restabliment de contrasenya"
+  "enrollAccountRecovery": {
+    "message": "Inscriu-te en la recuperació del compte"
  },
-  "enrolledPasswordReset": {
-    "message": "Inscrit al restabliment de contrasenya"
+  "enrolledAccountRecovery": {
+    "message": "Inscrit en la recuperació del compte"
  },
-  "withdrawPasswordReset": {
-    "message": "Retireu-vos del restabliment de contrasenya"
+  "withdrawAccountRecovery": {
+    "message": "Retirar-se de la recuperació del compte"
  },
  "enrollPasswordResetSuccess": {
    "message": "Inscrit correctament!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Retirat correctament!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "L'usuari $ID$ està inscrit a l'assistència per restablir la contrasenya.",
+  "eventEnrollAccountRecovery": {
+    "message": "Usuari $ID$ registrat en la recuperació del compte.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "L'usuari $ID$ s'ha retirat de l'assistència per restablir la contrasenya.",
+  "eventWithdrawAccountRecovery": {
+    "message": "L'usuari $ID$ s'ha retirat de la recuperació del compte.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "La inscripció permetrà als administradors de l’organització canviar la vostra contrasenya mestra. Esteu segur que voleu inscriure-vos?"
  },
-  "resetPasswordPolicy": {
-    "message": "Restabliment de la contrasenya mestra"
+  "accountRecoveryPolicy": {
+    "message": "Administració de recuperació de comptes"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Permetre als administradors de l'organització restablir la contrasenya mestra dels seus usuaris."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recupereu els comptes dels membres quan s'obliden o perden la contrasenya mestra o els dispositius de confiança. El procés de recuperació es basa en el mètode de xifratge del compte."
  },
  "resetPasswordPolicyWarning": {
    "message": "Els usuaris de l’organització hauran de registrar-se o ser registrats abans que els administradors puguen restablir la seua contrasenya mestra."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "L'entrada no ha de contenir només espais en blanc.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Descarta"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Encriptació de dispositius de confiança"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Una vegada autenticats, els membres desxifraran les dades de la caixa forta mitjançant una clau emmagatzemada al seu dispositiu. El",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "política de restabliment de la contrasenya mestra",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "política d'administració de recuperació de comptes",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "amb inscripció automàtica s'activarà quan s'utilitze aquesta opció.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recupera el compte"
+  },
+  "updatedTempPassword": {
+    "message": "L'usuari ha actualitzat una contrasenya emesa mitjançant la recuperació del compte."
  }
 }
--- a/apps/web/src/locales/cs/messages.json
+++ b/apps/web/src/locales/cs/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Nápověda k Vašemu heslu nemůže být stejná jako Vaše heslo."
  },
-  "enrollPasswordReset": {
-    "message": "Zapsat do procesu resetování hesla"
+  "enrollAccountRecovery": {
+    "message": "Zapsat do obnovení účtu"
  },
-  "enrolledPasswordReset": {
-    "message": "Zapsáno do procesu resetování hesla"
+  "enrolledAccountRecovery": {
+    "message": "Zapsán do obnovení účtu"
  },
-  "withdrawPasswordReset": {
-    "message": "Odstoupit z procesu resetování hesla"
+  "withdrawAccountRecovery": {
+    "message": "Odstoupit z obnovení účtu"
  },
  "enrollPasswordResetSuccess": {
    "message": "Zápis byl úspěšný!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Odstoupení bylo úspěšné!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Uživatel $ID$ se zapsal do procesu s resetováním hesla.",
+  "eventEnrollAccountRecovery": {
+    "message": "Uživatel $ID$ zapsán do procesu obnovení účtu.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Uživatel $ID$ odstoupil z procesu resetování hesla.",
+  "eventWithdrawAccountRecovery": {
+    "message": "Uživatel $ID$ odstoupil z procesu obnovení účtu.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Zápis umožní správcům organizace změnit Vaše hlavní heslo"
  },
-  "resetPasswordPolicy": {
-    "message": "Resetování hlavního hesla"
+  "accountRecoveryPolicy": {
+    "message": "Správa obnovení účtu"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Povolí administrátorům v organizaci resetovat hlavní hesla uživatelů organizace."
+  "accountRecoveryPolicyDescription": {
+    "message": "Obnovení členských účtů při zapomenutí hlavního hesla nebo ztrátě důvěryhodných zařízení. Procesy obnovení jsou založeny na metodě šifrování účtu."
  },
  "resetPasswordPolicyWarning": {
    "message": "Uživatelé v organizaci se budou muset sami zaregistrovat nebo být automaticky zaregistrovaní předtím, než budou moci administrátoři resetovat jejich hlavní heslo."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Vstup nesmí obsahovat jen mezery.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Zavřít"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Šifrování důvěryhodného zařízení"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Po ověření budou členové dešifrovat data v trezoru pomocí klíče uloženého na jejich zařízení. ",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "Pokud bude tato volba použita, bude zapnuta zásada ",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "Pokud bude tato volba aktivována, ",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "s automatickým zápisem.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "budou použity zásady obnovení účtu s automatickým zápisem.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Obnovit účet"
+  },
+  "updatedTempPassword": {
+    "message": "Uživatel aktualizoval heslo vydané prostřednictvím obnovení účtu."
  }
 }
--- a/apps/web/src/locales/cy/messages.json
+++ b/apps/web/src/locales/cy/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/da/messages.json
+++ b/apps/web/src/locales/da/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Adgangskodetip og adgangskode må ikke være identiske."
  },
-  "enrollPasswordReset": {
-    "message": "Tilmeld Adgangskodenulstilling"
+  "enrollAccountRecovery": {
+    "message": "Indrullér i kontogendannelse"
  },
-  "enrolledPasswordReset": {
-    "message": "Tilmeldt Adgangskodenulstilling"
+  "enrolledAccountRecovery": {
+    "message": "Indrulleret i kontogendannelse"
  },
-  "withdrawPasswordReset": {
-    "message": "Afmeld fra Adgangskodenulstilling"
+  "withdrawAccountRecovery": {
+    "message": "Afmeld fra kontogendannelse"
  },
  "enrollPasswordResetSuccess": {
    "message": "Tilmelding lykkedes!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Afmelding lykkedes!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Bruger $ID$ tilmeldt adgangskodenulstilling.",
+  "eventEnrollAccountRecovery": {
+    "message": "Bruger $ID$ indrulleret i kontogendannelse.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Bruger $ID$ afmeldt adgangskodenulstilling.",
+  "eventWithdrawAccountRecovery": {
+    "message": "Bruger $ID$ afmeldt fra kontogendannelse.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Indrullering vil tillade organisationsadministratorer at ændre din hovedadgangskode"
  },
-  "resetPasswordPolicy": {
-    "message": "Nulstilling af hovedadgangskode"
+  "accountRecoveryPolicy": {
+    "message": "Kontogendannelseshåndtering"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Tillad admins at nulstille hovedadgangskoder for medlemmer."
+  "accountRecoveryPolicyDescription": {
+    "message": "Gendan medlemskonti, når hovedadgangskode eller betroede enheder er glemt eller tabt. Gendannelsesprocesser er baseret på kontokrypteringsmetoden."
  },
  "resetPasswordPolicyWarning": {
    "message": "Organisationsmedlemmer skal selvindrullere eller være auto-indrulleret, før admins kan nulstille deres hovedadgangskode."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input må ikke indeholde mellemrum.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Luk"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Betroet enhed-kryptering"
  },
-  "memberDecryptionTdeDescStart": {
-    "message": "Når godkendt, dekrypterer medlemmet boksdata vha. hovedadgangskoden. ",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionStart": {
+    "message": "Når godkendt, dekrypterer medlemmet boksdata vha. en nøgle gemt på enheden.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "Hovedadgangskodenulstillingspolitikken",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "Kontogendannelseshåndteringspolitikken",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "med automatisk indrullering aktiveres ved brug af denne indstilling.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Gendan konto"
+  },
+  "updatedTempPassword": {
+    "message": "Bruger har opdateret en adgangskode udstedt via kontogendannelse."
  }
 }
--- a/apps/web/src/locales/de/messages.json
+++ b/apps/web/src/locales/de/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Dein Passwort-Hinweis darf nicht identisch mit deinem Passwort sein."
  },
-  "enrollPasswordReset": {
-    "message": "Für Passwortzurücksetzung registrieren"
+  "enrollAccountRecovery": {
+    "message": "Für Kontowiederherstellung registrieren"
  },
-  "enrolledPasswordReset": {
-    "message": "Für Passwortzurücksetzung registriert"
+  "enrolledAccountRecovery": {
+    "message": "Für Kontowiederherstellung registriert"
  },
-  "withdrawPasswordReset": {
-    "message": "Von Passwortzurücksetzung abmelden"
+  "withdrawAccountRecovery": {
+    "message": "Von Kontowiederherstellung abmelden"
  },
  "enrollPasswordResetSuccess": {
    "message": "Registrierung erfolgreich!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Abmeldung erfolgreich!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Der Benutzer $ID$ hat sich für die Passwortzurücksetzung registriert.",
+  "eventEnrollAccountRecovery": {
+    "message": "Der Benutzer $ID$ hat sich für die Kontowiederherstellung registriert.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Der Benutzer $ID$ hat sich von der Passwortzurücksetzung abgemeldet.",
+  "eventWithdrawAccountRecovery": {
+    "message": "Der Benutzer $ID$ hat sich von der Kontowiederherstellung abgemeldet.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Die Registrierung erlaubt Administratoren der Organisation, dein Master-Passwort zu ändern. Bist du sicher, dass du dich registrieren möchtest?"
  },
-  "resetPasswordPolicy": {
-    "message": "Master-Passwort-Zurücksetzung"
+  "accountRecoveryPolicy": {
+    "message": "Kontowiederherstellungsverwaltung"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Administratoren in der Organisation erlauben, das Master-Passwort der Organisationsbenutzer zurückzusetzen."
+  "accountRecoveryPolicyDescription": {
+    "message": "Mitgliederkonten wiederherstellen, falls das Master-Passwort oder vertrauenswürdige Geräte vergessen werden oder verloren gehen. Der Wiederherstellungsprozess basiert auf der Verschlüsselungsmethode des Kontos."
  },
  "resetPasswordPolicyWarning": {
    "message": "Benutzer in der Organisation müssen sich selbst registrieren oder automatisch registriert sein, bevor Administratoren deren Master-Passwort zurücksetzen können."
@ -5227,15 +5227,15 @@
    "message": "Key Connector"
  },
  "memberDecryptionKeyConnectorDescStart": {
-    "message": "Verbinde die Anmeldung über SSO mit deinem selbst gehosteten Entschlüsselungsschlüssel-Server. Mit dieser Option müssen Mitglieder ihre Master-Passwörter nicht verwenden, um Tresordaten zu entschlüsseln.",
+    "message": "Verbinde die Anmeldung über SSO mit deinem selbst gehosteten Entschlüsselungsschlüssel-Server. Mit dieser Option müssen Mitglieder ihre Master-Passwörter nicht verwenden, um Tresordaten zu entschlüsseln. Die",
    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Connect login with SSO to your self-hosted decryption key server. Using this option, members won’t need to use their master passwords to decrypt vault data. The require SSO authentication and single organization policies are required to set up Key Connector decryption. Contact Bitwarden Support for set up assistance.'"
  },
  "memberDecryptionKeyConnectorDescLink": {
-    "message": "require SSO authentication and single organization policies",
+    "message": "Richtlinien zum Verlangen einer SSO-Authentifizierung und für einzelne Organisationen",
    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Connect login with SSO to your self-hosted decryption key server. Using this option, members won’t need to use their master passwords to decrypt vault data. The require SSO authentication and single organization policies are required to set up Key Connector decryption. Contact Bitwarden Support for set up assistance.'"
  },
  "memberDecryptionKeyConnectorDescEnd": {
-    "message": "are required to set up Key Connector decryption. Contact Bitwarden Support for set up assistance.",
+    "message": "werden benötigt, um die Key Connector Entschlüsselung einzurichten. Kontaktiere den Bitwarden Support für Hilfe beim Einrichten.",
    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Connect login with SSO to your self-hosted decryption key server. Using this option, members won’t need to use their master passwords to decrypt vault data. The require SSO authentication and single organization policies are required to set up Key Connector decryption. Contact Bitwarden Support for set up assistance.'"
  },
  "keyConnectorPolicyRestriction": {
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Eingabe darf nicht nur Leerzeichen enthalten.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Verwerfen"
  },
@ -6800,7 +6804,7 @@
    "description": "United States"
  },
  "smProjectDeleteAccessRestricted": {
-    "message": "Dir fehlen die Berechtigungen, dieses Projekt zu löschen.",
+    "message": "Dir fehlen die Berechtigungen, dieses Projekt zu löschen",
    "description": "The individual description shown to the user when the user doesn't have access to delete a project."
  },
  "smProjectsDeleteBulkConfirmation": {
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Vertrauenswürdige Geräteverschlüsselung"
  },
-  "memberDecryptionTdeDescStart": {
-    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionStart": {
+    "message": "Einmal authentifiziert, entschlüsseln Mitglieder Tresordaten mit einem Schlüssel auf ihrem Gerät. Die",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "Verwaltungsrichtlinie zur Kontowiederherstellung",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "mit automatischer Registrierung wird aktiviert, wenn diese Option verwendet wird.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Konto wiederherstellen"
+  },
+  "updatedTempPassword": {
+    "message": "Der Benutzer hat ein Passwort aktualisiert, das durch die Kontowiederherstellung ausgestellt wurde."
  }
 }
--- a/apps/web/src/locales/el/messages.json
+++ b/apps/web/src/locales/el/messages.json
@ -986,19 +986,19 @@
    "message": "Αυτή η εξαγωγή αρχείου θα προστατεύεται με κωδικό και θα απαιτείται ο κωδικός του αρχείου για αποκρυπτογράφηση."
  },
  "exportPasswordDescription": {
-    "message": "This password will be used to export and import this file"
+    "message": "Αυτός ο κωδικός πρόσβασης θα χρησιμοποιηθεί για την εξαγωγή και εισαγωγή αυτού του αρχείου"
  },
  "confirmMasterPassword": {
-    "message": "Confirm master password"
+    "message": "Επιβεβαίωση κύριου κωδικού πρόσβασης"
  },
  "confirmFormat": {
-    "message": "Confirm format"
+    "message": "Επιβεβαίωση μορφής"
  },
  "filePassword": {
-    "message": "File password"
+    "message": "Κωδικός πρόσβασης αρχείου"
  },
  "confirmFilePassword": {
-    "message": "Confirm file password"
+    "message": "Επιβεβαίωση κωδικού πρόσβασης αρχείου"
  },
  "accountRestrictedOptionDescription": {
    "message": "Use your account encryption key, derived from your account's username and Master Password, to encrypt the export and restrict import to only the current Bitwarden account."
@ -1007,10 +1007,10 @@
    "message": "Set a file password to encrypt the export and import it to any Bitwarden account using the password for decryption."
  },
  "exportTypeHeading": {
-    "message": "Export type"
+    "message": "Τύπος εξαγωγής"
  },
  "accountRestricted": {
-    "message": "Account restricted"
+    "message": "Ο λογαριασμός περιορίστηκε"
  },
  "passwordProtected": {
    "message": "Προστατευμένο με κωδικό"
@ -1397,7 +1397,7 @@
    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Enforce Bitwarden Two-step Login options for members by using the Two-step Login Policy.'"
  },
  "twoStepLoginPolicy": {
-    "message": "Two-step Login Policy"
+    "message": "Πολιτική Σύνδεσης Δύο βημάτων"
  },
  "twoStepLoginOrganizationDuoDesc": {
    "message": "To enforce Two-step Login through Duo, use the options below."
@ -1848,7 +1848,7 @@
    "message": "Χρέωση"
  },
  "billingPlanLabel": {
-    "message": "Billing plan"
+    "message": "Σχέδιο τιμολόγησης"
  },
  "paymentType": {
    "message": "Τύπος πληρωμής"
@ -2406,7 +2406,7 @@
    "message": "Ετησίως"
  },
  "annual": {
-    "message": "Annual"
+    "message": "Ετήσια"
  },
  "basePrice": {
    "message": "Βασική Τιμή"
@ -2529,7 +2529,7 @@
    "message": "Είστε βέβαιοι ότι θέλετε να διαγράψετε αυτή τη συλλογή;"
  },
  "editMember": {
-    "message": "Edit member"
+    "message": "Επεξεργασία μέλους"
  },
  "fieldOnTabRequiresAttention": {
    "message": "A field on the '$TAB$' tab requires your attention.",
@ -2703,7 +2703,7 @@
    }
  },
  "viewAllLoginOptions": {
-    "message": "View all log in options"
+    "message": "Δείτε όλες τις επιλογές σύνδεσης"
  },
  "viewedItemId": {
    "message": "Προβεβλημένο στοιχείο $ID$.",
@ -3514,7 +3514,7 @@
    "description": "ex. Date this item was updated"
  },
  "dateCreated": {
-    "message": "Created",
+    "message": "Δημιουργήθηκε",
    "description": "ex. Date this item was created"
  },
  "datePasswordUpdated": {
@ -3664,7 +3664,7 @@
    "message": "Ορίστε ελάχιστες απαιτήσεις, για ισχύ του κύριου κωδικού."
  },
  "twoStepLoginPolicyTitle": {
-    "message": "Require two-step login"
+    "message": "Απαίτηση για σύνδεση δύο βημάτων"
  },
  "twoStepLoginPolicyDesc": {
    "message": "Να απαιτείτε από τους χρήστες να ορίσουν τη σύνδεση σε δύο βήματα στους προσωπικούς τους λογαριασμούς."
@ -4003,7 +4003,7 @@
    "message": "Απενεργοποιημένο"
  },
  "revoked": {
-    "message": "Revoked"
+    "message": "Ανακλήθηκαν"
  },
  "sendLink": {
    "message": "Αποστολή Συνδέσμου",
@ -4307,13 +4307,13 @@
    "message": "Άδειες"
  },
  "permission": {
-    "message": "Permission"
+    "message": "Δικαιώματα"
  },
  "managerPermissions": {
-    "message": "Manager Permissions"
+    "message": "Δικαιώματα Manager"
  },
  "adminPermissions": {
-    "message": "Admin Permissions"
+    "message": "Δικαιώματα Διαχειριστή"
  },
  "accessEventLogs": {
    "message": "Αρχείο Καταγραφής Πρόσβασης"
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Η υπόδειξη κωδικού πρόσβασης, δεν μπορεί να είναι η ίδια με τον κωδικό πρόσβασης σας."
  },
-  "enrollPasswordReset": {
-    "message": "Επαναφορά κωδικού πρόσβασης"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Εγγεγραμμένος στην επαναφορά κωδικού πρόσβασης"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Επαναφορά κωδικού πρόσβασης"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Επιτυχής εγγραφή!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Επιτυχής απόσυρση!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Ο χρήστης $ID$ έχει εγγραφεί στη βοήθεια επαναφοράς κωδικού πρόσβασης.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Ο χρήστης $ID$ αποσύρθηκε από τη βοήθεια επαναφοράς κωδικού πρόσβασης.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Η εγγραφή θα επιτρέψει στους διαχειριστές του οργανισμού να αλλάξουν τον κύριο κωδικό σας. Είστε σίγουροι ότι θέλετε να εγγραφείτε;"
  },
-  "resetPasswordPolicy": {
-    "message": "Επαναφορά Κύριου Κωδικού Πρόσβασης"
+  "accountRecoveryPolicy": {
+    "message": "Διαχείριση ανάκτησης λογαριασμού"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Επιτρέψτε στους διαχειριστές του οργανισμού να επαναφέρουν τον κύριο κωδικό πρόσβασης των χρηστών."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Οι χρήστες του οργανισμού θα πρέπει να αυτο-εγγραφούν ή να εγγραφούν αυτόματα πριν οι διαχειριστές μπορούν να επαναφέρουν τον κύριο κωδικό πρόσβασής τους."
@ -4715,7 +4715,7 @@
    "message": "Πελάτες"
  },
  "client": {
-    "message": "Client",
+    "message": "Πελάτης",
    "description": "This is used as a table header to describe which client application created an event log."
  },
  "providerAdmin": {
@ -4915,7 +4915,7 @@
    "message": "Μία ή περισσότερες οργανωτικές πολιτικές σας αποτρέπει από την εξαγωγή του προσωπικού vault."
  },
  "activateAutofill": {
-    "message": "Activate auto-fill"
+    "message": "Ενεργοποίηση αυτόματης συμπλήρωσης"
  },
  "activateAutofillPolicyDesc": {
    "message": "Activate the auto-fill on page load setting on the browser extension for all existing and new members."
@ -4924,7 +4924,7 @@
    "message": "Compromised or untrusted websites can exploit auto-fill on page load."
  },
  "learnMoreAboutAutofill": {
-    "message": "Learn more about auto-fill"
+    "message": "Μάθετε περισσότερα για την αυτόματη συμπλήρωση"
  },
  "selectType": {
    "message": "Επιλογή Τύπου SSO"
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/en/messages.json
+++ b/apps/web/src/locales/en/messages.json
@ -4493,14 +4493,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4508,8 +4508,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4517,8 +4517,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4577,11 +4577,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6776,6 +6776,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6835,16 +6839,31 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "notFound":{
+    "message":  "$RESOURCE$ not found",
+    "placeholders": {
+      "resource": {
+        "content": "$1",
+        "example": "Service Account"
+      }
+    }
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/en_GB/messages.json
+++ b/apps/web/src/locales/en_GB/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enrol in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enroled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrolment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enroled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrolment will allow organisation administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organisation will need to self-enrol or be auto-enroled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/en_IN/messages.json
+++ b/apps/web/src/locales/en_IN/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in Password Reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in Password Reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from Password Reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset assistance.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset assistance.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organisation administrators to change your master password. Are you sure you want to enroll?"
  },
-  "resetPasswordPolicy": {
-    "message": "Master Password Reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow administrators in the organisation to reset organization users' master password."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Users in the organisation will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/eo/messages.json
+++ b/apps/web/src/locales/eo/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/es/messages.json
+++ b/apps/web/src/locales/es/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "La pista de su contraseña no puede ser la misma que la contraseña."
  },
-  "enrollPasswordReset": {
-    "message": "Inscribirse en el restablecimiento de contraseña"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Inscrito en el restablecimiento de contraseña"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Retirar del restablecimiento de contraseña"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Inscripción exitosa!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "¡Retiro exitoso!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Usuario $ID$ inscrito en la asistencia para restablecer contraseña.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "El usuario $ID$ se retiró de la asistencia para restablecer contraseña.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "La inscripción permitirá a los administradores de la organización cambiar su contraseña maestra. ¿Está seguro de que desea inscribirse?"
  },
-  "resetPasswordPolicy": {
-    "message": "Restablecer contraseña maestra"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Permitir a los administradores de la organización restablecer la contraseña maestra de los usuarios de la organización."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Los usuarios de la organización tendrán que autoinscribirse o estar inscritos antes de que los administradores puedan restablecer su contraseña maestra."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "La entrada no debe contener sólo espacios en blanco.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Descartar"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Cifrado de dispositivo de confianza"
  },
-  "memberDecryptionTdeDescStart": {
-    "message": "Una vez autenticados, los miembros descifrarán los datos de la caja fuerte usando una clave almacenada en su dispositivo. El",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionStart": {
+    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "política de restablecimiento de contraseña maestra",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recuperar cuenta"
+  },
+  "updatedTempPassword": {
+    "message": "El usuario actualizó una contraseña solicitada a través de la recuperación de la cuenta."
  }
 }
--- a/apps/web/src/locales/et/messages.json
+++ b/apps/web/src/locales/et/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Parooli vihje ei saa olla sama mis parool ise."
  },
-  "enrollPasswordReset": {
-    "message": "Liitu parooli lähtestamise valikuga"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Liitusid parooli lähtestamise valikuga"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Tühista nõusolek parooli lähtestamiseks"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Liitumine õnnestus!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Tühistamine õnnestus!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Kasutaja $ID$ liitus parooli lähtestamise valikuga.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Kasutaja $ID$ tühistas parooli taastamise valiku nõusuoleku.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Liitumine võimaldab organisatsiooni administraatoritel sinu ülemparooli muuta. Oled kindel, et soovid liituda?"
  },
-  "resetPasswordPolicy": {
-    "message": "Ülemparooli lähtestamine"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Võimalda organisatsiooni administraatoritel kasutajate ülemparooli lähtestada."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Organisatsiooni kuuluvad kasutajad peavad ise liituma või nad liidetakse automaatselt, enne kui nende ülemparooli lähtestada saab."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Loobu"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/eu/messages.json
+++ b/apps/web/src/locales/eu/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Zure pasahitza ezin da izan zure pasahitzaren pistaren berdina."
  },
-  "enrollPasswordReset": {
-    "message": "Izen-eman pasahitzaren berrezartzean"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Pasahitzaren berrezartzean izen-emana egina"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Atera pasahitzaren berrezartzetik"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Izen-ematea burutu da!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Izen ematetik atera zara!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "$ID$ erabiltzailea, pasahitza berrezartzeko asistentzian izena-emanda.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "$ID$ erabiltzailea, pasahitza berrezartzeko asistentziatik atera da.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Izen-emateak aukera emango die erakundeko administratzaileei pasahitz nagusia aldatzeko"
  },
-  "resetPasswordPolicy": {
-    "message": "Berrezarri pasahitz nagusia"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Administratzaileei aukera ematen die kideen pasahitz nagusiak berrezartzeko."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Erakundeko erabiltzaileek izena eman behar dute administratzaileek beren pasahitz nagusia berrezarri ahal izateko."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/fa/messages.json
+++ b/apps/web/src/locales/fa/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "اشاره به کلمه عبور شما نمی‌تواند همان کلمه عبور شما باشد."
  },
-  "enrollPasswordReset": {
-    "message": "در بازنشانی کلمه عبور ثبت نام کنید"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "در بازنشانی کلمه عبور ثبت نام کردید"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "از بازنشانی کلمه عبور خارج شوید"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "ثبت‌نام موفقیت آمیز بود!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "خروج موفقیت آمیز بود!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "کاربر $ID$ در بازنشانی کلمه عبور ثبت‌نام کرد.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "کاربر $ID$ از بازنشانی کلمه عبور خارج شد.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "ثبت نام به مدیران سازمان امکان می‌دهد کلمه عبور اصلی شما را تغییر دهند"
  },
-  "resetPasswordPolicy": {
-    "message": "کلمه عبور اصلی بازنشانی شد"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "به مدیران اجازه دهید تا کلمه‌های عبور اصلی اعضا را بازنشانی کنند."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "قبل از اینکه مدیران بتوانند کلمه عبور اصلی خود را بازنشانی کنند، اعضای سازمان باید خودجوش ثبت نام کنند یا به صورت خودکار ثبت نام کنند."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "نادیده گرفتن"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "رمزگذاری دستگاه مورد اعتماد"
  },
-  "memberDecryptionTdeDescStart": {
-    "message": "پس از احراز هویت، اعضا با استفاده از کلید ذخیره شده در دستگاه خود، داده‌های گاوصندوق را رمزگشایی می‌کنند.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionStart": {
+    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "سیاست بازنشانی کلمه عبور اصلی",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "با ثبت نام خودکار زمانی که از این گزینه استفاده می‌شود روشن می‌شود.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "with automatic enrollment will turn on when this option is used.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/fi/messages.json
+++ b/apps/web/src/locales/fi/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Salasanavihjeesi ei voi olla sama kuin salasanasi."
  },
-  "enrollPasswordReset": {
-    "message": "Liitä tilisi salasanan palautusapuun"
+  "enrollAccountRecovery": {
+    "message": "Liitä tilin palautusapuun"
  },
-  "enrolledPasswordReset": {
-    "message": "Liitetty salasanan palautusapuun"
+  "enrolledAccountRecovery": {
+    "message": "Liitetty tilin palautusapuun"
  },
-  "withdrawPasswordReset": {
-    "message": "Eroa salasanan palautusavusta"
+  "withdrawAccountRecovery": {
+    "message": "Eroa tilin palautusavusta"
  },
  "enrollPasswordResetSuccess": {
    "message": "Liitos onnistui!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Eroaminen onnistui!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Käyttäjä $ID$ liitti tilinsä salasanan palautusapuun.",
+  "eventEnrollAccountRecovery": {
+    "message": "Käyttäjä $ID$ liittyi tilin palautusapuun.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Käyttäjä $ID$ erosi salasanan palautusavusta.",
+  "eventWithdrawAccountRecovery": {
+    "message": "Käyttäjä $ID$ erosi tilin palautusavusta.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Liitos sallii organisaation ylläpitäjien vaihtaa pääsalasanasi"
  },
-  "resetPasswordPolicy": {
-    "message": "Pääsalasanan palautus"
+  "accountRecoveryPolicy": {
+    "message": "Tilien palautusavun hallinta"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Salli ylläpitäjien palauttaa jäsenten pääsalasanat."
+  "accountRecoveryPolicyDescription": {
+    "message": "Palauta jäsenien tilejä, jos niiden pääsalasana on unohtunut tai pääsy luotettuihin laitteisiin on menetetty. Palautusprosessit perustuvat tilin salausmenetelmään."
  },
  "resetPasswordPolicyWarning": {
    "message": "Organisaation jäsenten on liitytettävä tilinsä itse tai automaattisen liitoksen välityksellä ennen kuin ylläpitäjät voivat palauttaa heidän pääsalasanojaan."
@ -5665,7 +5665,7 @@
    }
  },
  "inputMaxLength": {
-    "message": "Syöte ei saa ylittää $COUNT$ merkkiä.",
+    "message": "Syötteen enimmäismerkkimäärä on $COUNT$.",
    "placeholders": {
      "count": {
        "content": "$1",
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Syöte ei voi sisältää vain tyhjiä merkkejä.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Sulje"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Luotettu laitesalaus"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Kun jäsenet on todennettu, he voivat purkaa holvin salauksen heidän laitteillaan säilytettävällä avaimella.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "Pääsalasanan palautuskäytäntö",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "Tilin palautusapu -hallintakäytäntö",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "automaattisella liitoksella otetaan käyttöön tätä valintaa käytettäessä.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "automaattisella liitoksella otetaan tämän asetuksen yhteydessä käyttöön.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Palauta tili"
+  },
+  "updatedTempPassword": {
+    "message": "Käyttäjä vaihtoi tilin palautusavun määrittämän salasanan."
  }
 }
--- a/apps/web/src/locales/fil/messages.json
+++ b/apps/web/src/locales/fil/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Hindi pwedeng maging pareho ang password hint at password mo."
  },
-  "enrollPasswordReset": {
-    "message": "Mag enroll sa pag reset ng password"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Nakatala sa pag reset ng password"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Mag withdraw mula sa pag reset ng password"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Tagumpay sa pagpapatala!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Tagumpay sa pag-withdraw!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ naka-enroll sa password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Nag-withdraw ang user $ID$ sa pag-reset ng password.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Ang pagpapatala ay magpapahintulot sa mga administrator ng organisasyon na baguhin ang iyong master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Payagan ang mga admin na i reset ang mga master password para sa mga miyembro."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Ang mga miyembro sa samahan ay kailangang mag self enroll o awtomatikong magpatala bago mai reset ng mga administrator ang kanilang master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/fr/messages.json
+++ b/apps/web/src/locales/fr/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Votre indice de mot de passe ne peut pas être identique à votre mot de passe."
  },
-  "enrollPasswordReset": {
-    "message": "S'inscrire à la réinitialisation du mot de passe"
+  "enrollAccountRecovery": {
+    "message": "S'inscrire à la récupération du compte"
  },
-  "enrolledPasswordReset": {
-    "message": "Inscrit à la réinitialisation du mot de passe"
+  "enrolledAccountRecovery": {
+    "message": "Inscrit à la récupération du compte"
  },
-  "withdrawPasswordReset": {
-    "message": "Se retirer de la réinitialisation du mot de passe"
+  "withdrawAccountRecovery": {
+    "message": "Retirer de la récupération du compte"
  },
  "enrollPasswordResetSuccess": {
    "message": "Inscription réussie !"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Retrait réussi !"
  },
-  "eventEnrollPasswordReset": {
-    "message": "L'utilisateur $ID$ s'est inscrit à l'aide de réinitialisation du mot de passe.",
+  "eventEnrollAccountRecovery": {
+    "message": "L'utilisateur $ID$ est inscrit à la récupération du compte.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "L'utilisateur $ID$ s'est retiré de l'aide à la réinitialisation du mot de passe.",
+  "eventWithdrawAccountRecovery": {
+    "message": "L'utilisateur $ID$ a été retiré de la récupération du compte.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "L'inscription permettra aux administrateurs de l'organisation de changer votre mot de passe principal"
  },
-  "resetPasswordPolicy": {
-    "message": "Réinitialisation du mot de passe principal"
+  "accountRecoveryPolicy": {
+    "message": "Administration de récupération du compte"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Autoriser les administrateurs à réinitialiser les mots de passe principaux pour les membres."
+  "accountRecoveryPolicyDescription": {
+    "message": "Récupérer les comptes des membres lorsque le mot de passe principal ou les appareils de confiance sont oubliés ou perdus. Les processus de récupération sont basés sur la méthode de chiffrement du compte."
  },
  "resetPasswordPolicyWarning": {
    "message": "Les membres de l'organisation devront s'inscrire eux-mêmes ou être inscrits automatiquement avant que les administrateurs puissent réinitialiser leur mot de passe principal."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "L'entrée ne doit pas contenir seulement des espaces.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Rejeter"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Chiffrement de l'appareil de confiance"
  },
-  "memberDecryptionTdeDescStart": {
-    "message": "Une fois authentifiés, les membres déchiffreront leur coffre de données en utilisant une clé enregistrée sur leu appareil. La",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionStart": {
+    "message": "Une fois authentifiés, les membres déchiffreront les données du coffre à l'aide d'une clé enregistrée sur leur appareil. La",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "politique de sécurité de la restauration du mot de passe principal",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "politique d'administration de la restauration du compte",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "avec l'inscription automatique s'active lorsque cette option est utilisée.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "par inscription automatique s'active lorsque cette option est utilisée.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Récupérer le compte"
+  },
+  "updatedTempPassword": {
+    "message": "L'utilisateur a mis à jour un mot de passe émis lors de la récupération du compte."
  }
 }
--- a/apps/web/src/locales/gl/messages.json
+++ b/apps/web/src/locales/gl/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/he/messages.json
+++ b/apps/web/src/locales/he/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/hi/messages.json
+++ b/apps/web/src/locales/hi/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/hr/messages.json
+++ b/apps/web/src/locales/hr/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Podsjetnik za lozinku ne može biti isti kao lozinka."
  },
-  "enrollPasswordReset": {
-    "message": "Uključi mogućnost ponovnog postavljanja lozinke"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Mogućnost ponovnog postavljanja lozinke je uključena"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Isključi mogućnost ponovnog postavljanja lozinke"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Prijava uspješna!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Odjava uspješna!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Korisnik $ID$ učlanjen u ponovno postavljanje lozinke.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Korisnik $ID$ se povukao iz ponovnog postavljanja lozinke.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Učlanjenje će administratorima organizacije omogućiti promjenu tvoje glavne lozinke. Sigurno se želiš učlaniti?"
  },
-  "resetPasswordPolicy": {
-    "message": "Ponovno postavljanje glavne lozinke"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Dozvoli organizacijskim administratorima ponovno postavljanje glavnih lozniki korisnika."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Korisnici u organizaciji se trebaju ili sami učlaniti ili biti automatski učlanjeni da bi administratori mogli ponovno postavljati njihove lozinke."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Odbaci"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/hu/messages.json
+++ b/apps/web/src/locales/hu/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "A jelszavas tipp nem lehet azonos a jelszóval."
  },
-  "enrollPasswordReset": {
-    "message": "Bejelentkezés a Jelszó alaphelyzetbe állításba"
+  "enrollAccountRecovery": {
+    "message": "Regisztráció fiók helyreállításra"
  },
-  "enrolledPasswordReset": {
-    "message": "A bejelentkezés megtörtént a Jelszó alaphelyzetbe állításba"
+  "enrolledAccountRecovery": {
+    "message": "Megtörtént a regisztráció fiók helyreállításra."
  },
-  "withdrawPasswordReset": {
-    "message": "Kijelentkezés a Jelszó alaphelyzetbe állításból"
+  "withdrawAccountRecovery": {
+    "message": "Kilépés a fiók helyreállításból"
  },
  "enrollPasswordResetSuccess": {
    "message": "A bejelentkezés sikeres."
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "A kijelentkezés sikeres."
  },
-  "eventEnrollPasswordReset": {
-    "message": "$ID$ felhasználó bejelentkezett a jelszó alaphelyzetbe állítás támogatáshoz.",
+  "eventEnrollAccountRecovery": {
+    "message": "$ID$ felhasználó regisztrált a fiók helyreállításra.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "$ID$ felhasználó kijelentkezett a jelszó alaphelyzetbe állítás támogatásból.",
+  "eventWithdrawAccountRecovery": {
+    "message": "$ID$ felhasználó kilépett a fiók helyreállításból.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "A regisztráció lehetővé teszi a szervezet adminisztrátorainak a saját mesterjelszó megváltoztatását. Biztosan feliratkozunk?"
  },
-  "resetPasswordPolicy": {
-    "message": "Mesterjelszó alaphelyzetbe állítás"
+  "accountRecoveryPolicy": {
+    "message": "Fiók-helyreállítási adminisztráció"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "A szervezet adminisztrátorai alaphelyzetbe állíthatják a szervezet mesterjelszavát."
+  "accountRecoveryPolicyDescription": {
+    "message": "Tagsági fiókok helyreállítása, ha a mesterjelszó vagy a megbízható eszközök elfelejtésére vagy elvesztésére. A helyreállítási folyamatok a fióktitkosítási módszeren alapulnak."
  },
  "resetPasswordPolicyWarning": {
    "message": "A szervezet felhasználóinak regisztrálniuk kell magukat vagy automatikus regisztrálás szükséges mielőtt az adminisztrátorok alaphelyzetbe állíthatják a mesterjelszavukat."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "A bevitel nem tartalmazhat csak fehérszóköz karaktert.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Elvetés"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Megbízható eszköztitkosítás"
  },
-  "memberDecryptionTdeDescStart": {
-    "message": "A hitelesítés után a tagok az eszközükön tárolt kulccsal visszafejtik a tároló adatait.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionStart": {
+    "message": "A hitelesítés után a tagok az eszközükön tárolt kulccsal visszafejtik a tároló adatait. A",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "mesterjelszó alaphelyzetbe állítási szabályzat",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "fiók helyreállítási adminisztrációs szabályzat",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "automatikus regisztrációval bekapcsolásra kerül ezen opció használatával.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "automatikus regisztrációval bekapcsol, ha ez az opció van használatban.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Fiók helyreállítás"
+  },
+  "updatedTempPassword": {
+    "message": "A felhasználó frissítette a fiók helyreállítás során kiadott jelszót."
  }
 }
--- a/apps/web/src/locales/id/messages.json
+++ b/apps/web/src/locales/id/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Petunjuk kata sandi Anda tidak boleh sama dengan kata sandi Anda."
  },
-  "enrollPasswordReset": {
-    "message": "Ikut dalam pengubahan kata sandi"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Anda telah ikut dalam pengubahan kata sandi"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Keluar dari pengubahan kata sandi"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Sukses!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Penarikan sukses!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ sukses ikut dalam pengubahan kata sandi.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ keluar dalam pengubahan kata sandi.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Dengan mengikuti fitur ini mengijinkan admin organisasi untuk merubah kata sandi utama anda. Anda yakin mau masuk fitur ini?"
  },
-  "resetPasswordPolicy": {
-    "message": "Pengubahan Kata Sandi Utama"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Mengijinkan admin dalam organisasi untuk mengubah kata sandi utama anda."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Pengguna dalam organisasi perlu untuk memilih untuk mengikuti atau diikutkan secara otomatis sebelum admin dapat merubah kata sandi utama."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/it/messages.json
+++ b/apps/web/src/locales/it/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Il suggerimento per la password non può essere uguale alla tua password."
  },
-  "enrollPasswordReset": {
-    "message": "Iscriviti al ripristino della password"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Iscritto al ripristino della password"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Rifiuta il ripristino della password"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Iscrizione riuscita!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Rinuncia riuscita!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "L'utente $ID$ si è iscritto al ripristino della password.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "L'utente $ID$ ha rifiutato il ripristino della password.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Iscriversi consentirà agli amministratori dell'organizzazione di cambiare la tua password principale"
  },
-  "resetPasswordPolicy": {
-    "message": "Ripristina password principale"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Consenti agli amministratori di ripristinare le password principali dei membri."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "I membri dell'organizzazione dovranno iscriversi o essere iscritti automaticamente prima che gli amministratori possano ripristinare la loro password principale."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Ignora"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Criptografia dispositivo fidato"
  },
-  "memberDecryptionTdeDescStart": {
-    "message": "Una volta autenticati, i membri decriptograferanno i dati della cassaforte usando una chiave memorizzata sul proprio dispositivo. La",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionStart": {
+    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "politica di ripristino della password principale",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "con registrazione automatica si attiverà quando questa opzione è usata.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "with automatic enrollment will turn on when this option is used.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/ja/messages.json
+++ b/apps/web/src/locales/ja/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "パスワードのヒントをパスワードと同じにすることはできません。"
  },
-  "enrollPasswordReset": {
-    "message": "パスワードリセットに登録"
+  "enrollAccountRecovery": {
+    "message": "アカウント回復に登録する"
  },
-  "enrolledPasswordReset": {
-    "message": "パスワードリセットに登録済み"
+  "enrolledAccountRecovery": {
+    "message": "アカウント回復に登録しました"
  },
-  "withdrawPasswordReset": {
-    "message": "パスワードリセットから退出"
+  "withdrawAccountRecovery": {
+    "message": "アカウント回復から登録解除する"
  },
  "enrollPasswordResetSuccess": {
    "message": "登録に成功しました！"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "正常に退出しました！"
  },
-  "eventEnrollPasswordReset": {
-    "message": "ユーザー $ID$ がパスワードリセットの案内に登録しました。",
+  "eventEnrollAccountRecovery": {
+    "message": "ユーザー $ID$ をアカウント回復に登録しました。",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "ユーザー $ID$ がパスワードリセットの案内から退出しました。",
+  "eventWithdrawAccountRecovery": {
+    "message": "ユーザー $ID$ をアカウント回復から登録解除しました。",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "登録すると、組織管理者はマスターパスワードを変更できます。登録してもよろしいですか？"
  },
-  "resetPasswordPolicy": {
-    "message": "マスターパスワードのリセット"
+  "accountRecoveryPolicy": {
+    "message": "アカウント回復の管理"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "組織内の管理者に組織ユーザーのマスターパスワードのリセットを許可します。"
+  "accountRecoveryPolicyDescription": {
+    "message": "マスターパスワードまたは信頼できるデバイスを忘れた、または紛失した場合にメンバーアカウントを回復できます。回復プロセスはアカウントの暗号化方式に基づきます。"
  },
  "resetPasswordPolicyWarning": {
    "message": "管理者がマスターパスワードをリセットするには、組織内のユーザーは自己登録または自動登録する必要があります。"
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "値を空白のみにしないでください。",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "表示しない"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "信頼できるデバイスの暗号化"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "認証が完了すると、メンバーはデバイスに保存されているキーを使用して保管庫のデータを復号します。",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "マスターパスワードのリセットポリシー",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "アカウント回復管理ポリシー",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "このオプションを使用すると、自動登録が有効になります。",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "アカウント回復"
+  },
+  "updatedTempPassword": {
+    "message": "ユーザーはアカウント回復で発行されたパスワードを更新しました。"
  }
 }
--- a/apps/web/src/locales/ka/messages.json
+++ b/apps/web/src/locales/ka/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/km/messages.json
+++ b/apps/web/src/locales/km/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/kn/messages.json
+++ b/apps/web/src/locales/kn/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "ನಿಮ್ಮ ಪಾಸ್‌ವರ್ಡ್ ಸುಳಿವು ನಿಮ್ಮ ಪಾಸ್‌ವರ್ಡ್‌ನಂತೆಯೇ ಇರಬಾರದು."
  },
-  "enrollPasswordReset": {
-    "message": "ಪಾಸ್ವರ್ಡ್ ಮರುಹೊಂದಿಸಲು ನೋಂದಾಯಿಸಿ"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "ಪಾಸ್ವರ್ಡ್ ಮರುಹೊಂದಿಸಲು ದಾಖಲಾಗಿದೆ"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "ಪಾಸ್ವರ್ಡ್ ಮರುಹೊಂದಿಸುವಿಕೆಯಿಂದ ಹಿಂತೆಗೆದುಕೊಳ್ಳಿ"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "ದಾಖಲಾತಿ ಯಶಸ್ಸು!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "ಹಿಂತೆಗೆದುಕೊಳ್ಳುವ ಯಶಸ್ಸು!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "ಬಳಕೆದಾರ $ID$ ಪಾಸ್‌ವರ್ಡ್ ಮರುಹೊಂದಿಸುವ ಸಹಾಯಕ್ಕೆ ಸೇರಿಕೊಂಡಿದೆ.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "ಬಳಕೆದಾರ $ID$ ಪಾಸ್‌ವರ್ಡ್ ಮರುಹೊಂದಿಸುವ ಸಹಾಯದಿಂದ ಹಿಂದೆ ಸರಿದಿದೆ.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "ನಿಮ್ಮ ಮಾಸ್ಟರ್ ಪಾಸ್‌ವರ್ಡ್ ಅನ್ನು ಬದಲಾಯಿಸಲು ಸಂಸ್ಥೆಯ ನಿರ್ವಾಹಕರಿಗೆ ದಾಖಲಾತಿ ಅನುಮತಿಸುತ್ತದೆ. ನೀವು ದಾಖಲಾತಿ ಮಾಡಲು ಖಚಿತವಾಗಿ ಬಯಸುವಿರಾ?"
  },
-  "resetPasswordPolicy": {
-    "message": "ಮಾಸ್ಟರ್ ಪಾಸ್ವರ್ಡ್ ಮರುಹೊಂದಿಸಿ"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "ಸಂಸ್ಥೆಯ ಬಳಕೆದಾರರ ಮಾಸ್ಟರ್ ಪಾಸ್‌ವರ್ಡ್ ಅನ್ನು ಮರುಹೊಂದಿಸಲು ಸಂಸ್ಥೆಯಲ್ಲಿನ ನಿರ್ವಾಹಕರನ್ನು ಅನುಮತಿಸಿ."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "ನಿರ್ವಾಹಕರು ತಮ್ಮ ಮಾಸ್ಟರ್ ಪಾಸ್‌ವರ್ಡ್ ಅನ್ನು ಮರುಹೊಂದಿಸುವ ಮೊದಲು ಸಂಸ್ಥೆಯಲ್ಲಿನ ಬಳಕೆದಾರರು ಸ್ವಯಂ-ದಾಖಲಾತಿ ಅಥವಾ ಸ್ವಯಂ-ದಾಖಲಾತಿ ಮಾಡಬೇಕಾಗುತ್ತದೆ."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/ko/messages.json
+++ b/apps/web/src/locales/ko/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "비밀번호 힌트는 비밀번호와 같을 수 없습니다."
  },
-  "enrollPasswordReset": {
-    "message": "비밀번호 초기화에 등록"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "비밀번호 초기화에 등록됨"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "비밀번호 초기화에서 등록 해제"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "성공적으로 등록됨!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "성공적으로 등록 해제됨!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "$ID$ 사용자가 비밀번호 초기화 지원에 등록되었습니다.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "$ID$ 사용자가 비밀번호 초기화 지원에서 등록 해제되었습니다.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "등록하면 조직 관리자가 마스터 비밀번호를 변경할 수 있습니다. 등록하시겠습니까?"
  },
-  "resetPasswordPolicy": {
-    "message": "마스터 비밀번호 재설정"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "조직 관리자가 조직 사용자의 마스터 비밀번호를 재설정할 수 있도록 허용합니다."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "조직의 사용자는 관리자가 마스터 암호를 재설정하기 전에 직접 등록 또는 자동 등록이 되어야 합니다."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/lv/messages.json
+++ b/apps/web/src/locales/lv/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Paroles norāde nedrīkst būt tāda pati kā parole."
  },
-  "enrollPasswordReset": {
-    "message": "Pievienot paroles atiestatīšanas sarakstam"
+  "enrollAccountRecovery": {
+    "message": "Pieteikties konta atkopšanai"
  },
-  "enrolledPasswordReset": {
-    "message": "Pievienots paroles atiestatīšanas sarakstam"
+  "enrolledAccountRecovery": {
+    "message": "Pieteicies konta atkopšanai"
  },
-  "withdrawPasswordReset": {
-    "message": "Izņemt no paroles atiestatīšanas saraksta"
+  "withdrawAccountRecovery": {
+    "message": "Atsaukt konta atkopšanu"
  },
  "enrollPasswordResetSuccess": {
    "message": "Pievienošana bija veiksmīga."
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Izņemšana bija veiksmīga."
  },
-  "eventEnrollPasswordReset": {
-    "message": "Lietotājs $ID$ tika pievienots paroles atiestatīšanas atbalsta sarakstam.",
+  "eventEnrollAccountRecovery": {
+    "message": "Lietotājs $ID$ pieteicās konta atkopšanai.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Lietotājs $ID$ tika izņemts no paroles atiestatīšanas atbalsta saraksta.",
+  "eventWithdrawAccountRecovery": {
+    "message": "Lietotājs $ID$ atsauca konta atkopšanu.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Ievietošana sarakstā ļaus apvienības pārvaldniekiem mainīt galveno paroli. Vai tiešām ievietot sarakstā?"
  },
-  "resetPasswordPolicy": {
-    "message": "Galvenās paroles atiestatīšana"
+  "accountRecoveryPolicy": {
+    "message": "Kontu atkopšanas pārvaldība"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Ļaut apvienības pārvaldniekiem atiestatīt lietotāju galveno paroli."
+  "accountRecoveryPolicyDescription": {
+    "message": "Atkopj dalībnieku kontus, kad galvenā parole vai uzticamās ierīces ir aizmirstas vai pazaudētas. Atkopšanas pamatā ir konta šifrēšanas veids."
  },
  "resetPasswordPolicyWarning": {
    "message": "Apvienības lietotājiem pašiem būs sevi jāievieto sarakstā vai viņiem jābūt automātiski ievietotiem sarakstā, pirms pārvaldnieki var atiestatīt galveno paroli."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Ievadītā vērtība nevar sastāvēt tikai no atstarpēm.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Noraidīt"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Uzticamo ierīču šifrēšana"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Pēc pieteikšanās dalībnieki atšifrēs glabātavas saturu ar ierīcē glabātu atslēgu.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "Galvenās paroles atiestatīšanas nosacījums",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "Kontu atkopšanas pārvaldības nosacījumi",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "ar automātisku ievietošanu sarakstā tiks ieslēgts, kad šī iespēja ir izmantota.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "ar automātisku ievietošanu sarakstā tiks ieslēgts, kad šī iespēja tiek izmantota.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Atkopt kontu"
+  },
+  "updatedTempPassword": {
+    "message": "Lietotājs atjaunināja konta atkopšanas izsniegtu paroli."
  }
 }
--- a/apps/web/src/locales/ml/messages.json
+++ b/apps/web/src/locales/ml/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/my/messages.json
+++ b/apps/web/src/locales/my/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/nb/messages.json
+++ b/apps/web/src/locales/nb/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Passordhintet ditt kan ikke være det samme som passordet ditt."
  },
-  "enrollPasswordReset": {
-    "message": "Registrer i tilbakestilling av passord"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Registrert i tilbakestilling av passord"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Trekk tilbake fra tilbakestilling av passord"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Innrulleringssuksess!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Tilbaketrekking vellykket!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Bruker $ID$ ble valgt for hjelp til å tilbakestille passordet.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Brukeren $ID$ trakk seg ved hjelp av hjelp for tilbakestilling av passord.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Ikrafttredelse vil tillate organisasjonsadministratorer å endre hovedpassordet ditt. Er du sikker på at du vil inkludere?"
  },
-  "resetPasswordPolicy": {
-    "message": "Tilbakestill hovedpassord"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Tillat administratorer i organisasjonen å tilbakestille organisasjonens hovedpassord."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Brukere i organisasjonen må bytte selv eller bli automatisk registrert før administratorer kan tilbakestille sitt hovedpassord."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Avvis"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/ne/messages.json
+++ b/apps/web/src/locales/ne/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/nl/messages.json
+++ b/apps/web/src/locales/nl/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Je wachtwoordhint moet anders zijn dan je wachtwoord."
  },
-  "enrollPasswordReset": {
-    "message": "Aanmelden voor wachtwoordherstel"
+  "enrollAccountRecovery": {
+    "message": "Aanmelden voor accountherstel"
  },
-  "enrolledPasswordReset": {
-    "message": "Aangemeld voor wachtwoordherstel"
+  "enrolledAccountRecovery": {
+    "message": "Aangemeld bij accountherstel"
  },
-  "withdrawPasswordReset": {
-    "message": "Teruggetrokken van wachtwoordherstel"
+  "withdrawAccountRecovery": {
+    "message": "Afmelden voor accountherstel"
  },
  "enrollPasswordResetSuccess": {
    "message": "Succesvol aangemeld!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Succesvol ingetrokken!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Gebruiker $ID$ heeft zich aangemeld voor assistentie bij wachtwoordherstel.",
+  "eventEnrollAccountRecovery": {
+    "message": "Gebruiker $ID$ heeft zich aangemeld voor accountherstel.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Gebruiker $ID$ heeft zich teruggetrokken van assistentie bij wachtwoordherstel.",
+  "eventWithdrawAccountRecovery": {
+    "message": "Gebruiker $ID$ heeft zich afgemeld voor accountherstel.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Inschrijving stelt organisatiebeheerders in staat om je hoofdwachtwoord te wijzigen. Weet je zeker dat je wilt inschrijven?"
  },
-  "resetPasswordPolicy": {
-    "message": "Hoofdwachtwoord opnieuw instellen"
+  "accountRecoveryPolicy": {
+    "message": "Accountherstel-administratie"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Beheerders in de organisatie toestaan het hoofdwachtwoord van gebruikers van de organisatie opnieuw in te stellen."
+  "accountRecoveryPolicyDescription": {
+    "message": "Herstel accounts van leden in geval van vergeten of verloren hoofdwachtwoord of vertrouwde apparaten. Het herstelproces is gebaseerd op de encryptiemethode van het account."
  },
  "resetPasswordPolicyWarning": {
    "message": "Gebruikers in de organisatie moeten zichzelf inschrijven of automatisch worden ingeschreven voordat beheerders hun hoofdwachtwoord opnieuw kunnen instellen."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Invoer mag niet alleen witruimte bevatten.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Sluiten"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
-    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionStart": {
+    "message": "Eenmaal ingelogd, ontsleutelen leden kluisgegevens met een op hun apparaat opgeslagen sleutel. Schakelt",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "accountherstel-administratiebeleid",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "in met automatische inschrijving wanneer deze optie wordt gebruikt.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Account herstellen"
+  },
+  "updatedTempPassword": {
+    "message": "Gebruiker heeft een via accountherstel uitgegeven wachtwoord bijgewerkt."
  }
 }
--- a/apps/web/src/locales/nn/messages.json
+++ b/apps/web/src/locales/nn/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/or/messages.json
+++ b/apps/web/src/locales/or/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/pl/messages.json
+++ b/apps/web/src/locales/pl/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Podpowiedź do hasła nie może być taka sama jak hasło."
  },
-  "enrollPasswordReset": {
-    "message": "Zarejestruj do resetowania hasła"
+  "enrollAccountRecovery": {
+    "message": "Przystąp do odzyskiwania konta"
  },
-  "enrolledPasswordReset": {
-    "message": "Użytkownik został zarejestrowany do resetowania hasła"
+  "enrolledAccountRecovery": {
+    "message": "Dołączono do odzyskiwania konta"
  },
-  "withdrawPasswordReset": {
-    "message": "Wyrejestruj z resetowania hasła"
+  "withdrawAccountRecovery": {
+    "message": "Wycofaj z odzyskiwania konta"
  },
  "enrollPasswordResetSuccess": {
    "message": "Użytkownik został zarejestrowany!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Użytkownik został wyrejestrowany!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Użytkownik $ID$ został zarejestrowany do resetowania hasła.",
+  "eventEnrollAccountRecovery": {
+    "message": "Użytkownik $ID$ przystapił do odzyskiwania konta.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Użytkownik $ID$ został wyrejestrowany z resetowania hasła.",
+  "eventWithdrawAccountRecovery": {
+    "message": "Użytkownik $ID$ wycofał się z odzyskania konta.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Rejestracja zezwala administratorom organizacji na zmianę Twojego hasła głównego. Czy na pewno chcesz się zarejestrować?"
  },
-  "resetPasswordPolicy": {
-    "message": "Zresetowanie hasła głównego"
+  "accountRecoveryPolicy": {
+    "message": "Administracja odzyskiwaniem konta"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Zezwalaj administratorom organizacji na resetowanie hasła głównego użytkowników."
+  "accountRecoveryPolicyDescription": {
+    "message": "Odzyskaj konta użytkowików, gdy utracą hasło główne lub zaufane urządzenia. Procesy odzyskiwania opierają się na metodzie szyfrowania konta."
  },
  "resetPasswordPolicyWarning": {
    "message": "Użytkownicy w organizacji muszą samodzielnie zarejestrować się do resetowania hasła przez administratorów."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Tekst nie może zawierać tylko spacji.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Odrzuć"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Szyfrowanie zaufanego urządzenia"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Po uwierzytelnieniu użytkownicy odszyfrowają dane sejfu przy użyciu klucza zapisanego na ich urządzeniu.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "Zasady resetowania hasła głównego",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "polityka zarządzania odzyskiwaniem konta",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "z automatycznym zapisem włączy się, gdy ta opcja jest używana.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Odzyskaj konto"
+  },
+  "updatedTempPassword": {
+    "message": "Użytkownik zaktualizował hasło wydane poprzez odzyskiwanie konta."
  }
 }
--- a/apps/web/src/locales/pt_BR/messages.json
+++ b/apps/web/src/locales/pt_BR/messages.json
@ -2029,7 +2029,7 @@
    "message": "Cancelar Assinatura"
  },
  "subscriptionExpiration": {
-    "message": "Subscription expiration"
+    "message": "Sua assinatura expirou"
  },
  "subscriptionCanceled": {
    "message": "A assinatura foi cancelada."
@ -2760,7 +2760,7 @@
    }
  },
  "editItemWithName": {
-    "message": "Edit item - $NAME$",
+    "message": "Editar item - $NAME$",
    "placeholders": {
      "name": {
        "content": "$1",
@ -3144,7 +3144,7 @@
    "message": "Você pode acessar essa organização quando um administrador confirmar sua associação. Enviaremos um e-mail quando isso acontecer."
  },
  "inviteInitAcceptedDesc": {
-    "message": "You can now access this organization."
+    "message": "Você agora pode acessar esta organização."
  },
  "inviteAcceptFailed": {
    "message": "Não é possível aceitar o convite. Peça a um administrador da organização para enviar um novo convite."
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Sua dica de senha senha não pode ser a mesma que a sua senha."
  },
-  "enrollPasswordReset": {
-    "message": "Inscrever-se na Redefinição de Senha"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Inscrito na Redefinição de Senha"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Retirar da Redefinição de Senha"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Inscrição com sucesso!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Retirada com sucesso!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "O usuário $ID$ inscreveu-se na assistência para redefinição de senha.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "O usuário $ID$ retirou-se da assistência para redefinição de senha.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "A inscrição permitirá que os administradores da organização alterem sua senha mestra. Tem certeza que deseja se inscrever?"
  },
-  "resetPasswordPolicy": {
-    "message": "Redefinir Senha Mestra"
+  "accountRecoveryPolicy": {
+    "message": "Gerenciar recuperação de conta"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Permitir que os administradores da organização redefinam a senha mestra dos usuários da organização."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recuperar contas de membros quando a senha mestra ou dispositivos confiáveis são esquecidos ou perdidos. Os processos de recuperação baseiam-se no método de criptografia da conta."
  },
  "resetPasswordPolicyWarning": {
    "message": "Os usuários da organização terão de se inscrever automaticamente ou serem inscritos automaticamente para que os administradores possam redefinir sua senha mestra."
@ -4865,7 +4865,7 @@
    }
  },
  "vaultTimeoutPolicyWithActionInEffect": {
-    "message": "Your organization policies are affecting your vault timeout. Maximum allowed vault timeout is $HOURS$ hour(s) and $MINUTES$ minute(s). Your vault timeout action is set to $ACTION$.",
+    "message": "As políticas da sua organização estão afetando o tempo limite do seu cofre. O Tempo Limite Máximo permitido do Cofre é {0} hora(s) e {1} minuto(s). Seu tempo limite do cofre está definido em {2}.",
    "placeholders": {
      "hours": {
        "content": "$1",
@ -4882,7 +4882,7 @@
    }
  },
  "vaultTimeoutActionPolicyInEffect": {
-    "message": "Your organization policies have set your vault timeout action to $ACTION$.",
+    "message": "As políticas da sua organização definiram a ação tempo limite do seu cofre para $ACTION$.",
    "placeholders": {
      "action": {
        "content": "$1",
@ -5231,7 +5231,7 @@
    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Connect login with SSO to your self-hosted decryption key server. Using this option, members won’t need to use their master passwords to decrypt vault data. The require SSO authentication and single organization policies are required to set up Key Connector decryption. Contact Bitwarden Support for set up assistance.'"
  },
  "memberDecryptionKeyConnectorDescLink": {
-    "message": "require SSO authentication and single organization policies",
+    "message": "requer autenticação SSO e políticas de organização única",
    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Connect login with SSO to your self-hosted decryption key server. Using this option, members won’t need to use their master passwords to decrypt vault data. The require SSO authentication and single organization policies are required to set up Key Connector decryption. Contact Bitwarden Support for set up assistance.'"
  },
  "memberDecryptionKeyConnectorDescEnd": {
@ -5683,7 +5683,7 @@
    }
  },
  "inputMinValue": {
-    "message": "Input value must be at least $MIN$.",
+    "message": "O valor de entrada deve ser pelo menos $MIN$.",
    "placeholders": {
      "min": {
        "content": "$1",
@ -5692,7 +5692,7 @@
    }
  },
  "inputMaxValue": {
-    "message": "Input value must not exceed $MAX$.",
+    "message": "O valor de entrada não deve exceder $MAX$.",
    "placeholders": {
      "max": {
        "content": "$1",
@ -6198,7 +6198,7 @@
    "description": "Toast message after deleting one or multiple access tokens."
  },
  "noAccessTokenSelected": {
-    "message": "No access token selected to revoke",
+    "message": "Nenhum token de acesso selecionado para revogar",
    "description": "Toast error message after trying to delete access tokens but not selecting any access tokens."
  },
  "submenu": {
@ -6283,22 +6283,22 @@
    "message": "Grupo"
  },
  "groupAccessAll": {
-    "message": "This group can access and modify all items."
+    "message": "Este grupo pode acessar e modificar todos os itens."
  },
  "memberAccessAll": {
-    "message": "This member can access and modify all items."
+    "message": "Este usuário pode acessar e modificar todos os itens."
  },
  "domainVerification": {
-    "message": "Domain verification"
+    "message": "Verificação de Domínio"
  },
  "newDomain": {
    "message": "Novo domínio"
  },
  "noDomains": {
-    "message": "No domains"
+    "message": "Sem domínio"
  },
  "noDomainsSubText": {
-    "message": "Connecting a domain allows members to skip the SSO identifier field during Login with SSO."
+    "message": "Conectar um domínio permite que os membros pulem o campo identificador SSO durante o Login com SSO."
  },
  "verifyDomain": {
    "message": "Verificar domínio"
@ -6307,31 +6307,31 @@
    "message": "Reverificar domínio"
  },
  "copyDnsTxtRecord": {
-    "message": "Copy DNS TXT record"
+    "message": "Copiar registro do DNS TXT"
  },
  "dnsTxtRecord": {
    "message": "Registro DNS TXT"
  },
  "dnsTxtRecordInputHint": {
-    "message": "Copy and paste the TXT record into your DNS Provider."
+    "message": "Copie e cole o registro TXT no seu provedor de DNS."
  },
  "domainNameInputHint": {
-    "message": "Example: mydomain.com. Subdomains require separate entries to be verified."
+    "message": "Exemplo: meudominio.com. Subdomínios requerem entradas separadas para serem verificadas."
  },
  "automaticDomainVerification": {
-    "message": "Automatic Domain Verification"
+    "message": "Verificação de domínio automática"
  },
  "automaticDomainVerificationProcess": {
-    "message": "Bitwarden will attempt to verify the domain 3 times during the first 72 hours. If the domain can’t be verified, check the DNS record in your host and manually verify. The domain will be removed from your organization in 7 days if it is not verified"
+    "message": "O Bitwarden tentará verificar o domínio 3 vezes durante as primeiras 72 horas. Se o domínio não puder ser verificado, cheque o registro DNS no seu host e o verifique manualmente. O domínio será removido da sua organização em 7 dias se não for verificado"
  },
  "invalidDomainNameMessage": {
-    "message": "Input is not a valid format. Format: mydomain.com. Subdomains require separate entries to be verified."
+    "message": "A entrada não está em um formato válido. Formato: meudominio.com. Subdomínios requerem entradas separadas a serem verificadas."
  },
  "removeDomain": {
    "message": "Remover domínio"
  },
  "removeDomainWarning": {
-    "message": "Removing a domain cannot be undone. Are you sure you want to continue?"
+    "message": "A remoção de um domínio não pode ser desfeita. Tem certeza de que deseja continuar?"
  },
  "domainRemoved": {
    "message": "Domínio removido"
@ -6343,10 +6343,10 @@
    "message": "Domínio verificado"
  },
  "duplicateDomainError": {
-    "message": "You can't claim the same domain twice."
+    "message": "Você não pode reivindicar o mesmo domínio duas vezes."
  },
  "domainNotAvailable": {
-    "message": "Someone else is using $DOMAIN$. Use a different domain to continue.",
+    "message": "$DOMAIN$ já está sendo usado. Use um domínio diferente para continuar.",
    "placeholders": {
      "DOMAIN": {
        "content": "$1",
@ -6355,7 +6355,7 @@
    }
  },
  "domainNotVerified": {
-    "message": "$DOMAIN$ not verified. Check your DNS record.",
+    "message": "$DOMAIN$ não verificado. Verifique seu registro DNS.",
    "placeholders": {
      "DOMAIN": {
        "content": "$1",
@ -6376,16 +6376,16 @@
    "message": "Status"
  },
  "lastChecked": {
-    "message": "Last checked"
+    "message": "Última verificação:"
  },
  "editDomain": {
-    "message": "Edit domain"
+    "message": "Editar domínio"
  },
  "domainFormInvalid": {
-    "message": "There are form errors that need your attention"
+    "message": "Há erros de formulário que precisam da sua atenção"
  },
  "addedDomain": {
-    "message": "Added domain $DOMAIN$",
+    "message": "Domínio $DOMAIN$ adicionado",
    "placeholders": {
      "DOMAIN": {
        "content": "$1",
@ -6394,7 +6394,7 @@
    }
  },
  "removedDomain": {
-    "message": "Removed domain $DOMAIN$",
+    "message": "Domínio $DOMAIN$ removido",
    "placeholders": {
      "DOMAIN": {
        "content": "$1",
@ -6403,7 +6403,7 @@
    }
  },
  "domainVerifiedEvent": {
-    "message": "$DOMAIN$ verified",
+    "message": "$DOMAIN$ verificado",
    "placeholders": {
      "DOMAIN": {
        "content": "$1",
@ -6412,7 +6412,7 @@
    }
  },
  "domainNotVerifiedEvent": {
-    "message": "$DOMAIN$ not verified",
+    "message": "$DOMAIN$ não verificado",
    "placeholders": {
      "DOMAIN": {
        "content": "$1",
@ -6421,28 +6421,28 @@
    }
  },
  "membersColumnHeader": {
-    "message": "Member/Group"
+    "message": "Membro/Grupo"
  },
  "groupAndMemberColumnHeader": {
-    "message": "Member"
+    "message": "Membro"
  },
  "selectGroupsAndMembers": {
-    "message": "Select groups and members"
+    "message": "Selecione grupos e membros"
  },
  "selectGroups": {
-    "message": "Select groups"
+    "message": "Selecione grupos"
  },
  "userPermissionOverrideHelper": {
-    "message": "Permissions set for a member will replace permissions set by that member's group"
+    "message": "Permissões definidas para um membro substituirão as permissões definidas pelo grupo desse membro"
  },
  "noMembersOrGroupsAdded": {
-    "message": "No members or groups added"
+    "message": "Nenhum membro ou grupo adicionado"
  },
  "deleted": {
-    "message": "Deleted"
+    "message": "Excluído"
  },
  "memberStatusFilter": {
-    "message": "Member status filter"
+    "message": "Filtro de status de membros"
  },
  "inviteMember": {
    "message": "Invite member"
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/pt_PT/messages.json
+++ b/apps/web/src/locales/pt_PT/messages.json
@ -1,6 +1,6 @@
 {
  "pageTitle": {
-    "message": "Cofre Web $APP_NAME$",
+    "message": "Cofre web $APP_NAME$",
    "description": "The title of the website in the browser window.",
    "placeholders": {
      "app_name": {
@ -41,7 +41,7 @@
    "message": "Nova palavra-passe"
  },
  "passphrase": {
-    "message": "Frase-passe"
+    "message": "Frase de acesso"
  },
  "notes": {
    "message": "Notas"
@ -80,7 +80,7 @@
    "message": "Número da licença"
  },
  "email": {
-    "message": "Email"
+    "message": "E-mail"
  },
  "phone": {
    "message": "Telefone"
@ -125,19 +125,19 @@
    "message": "Título"
  },
  "mr": {
-    "message": "Sr"
+    "message": "Sr."
  },
  "mrs": {
-    "message": "Sra"
+    "message": "Sra."
  },
  "ms": {
-    "message": "Sra"
+    "message": "Sra."
  },
  "mx": {
    "message": "Mx"
  },
  "dr": {
-    "message": "Dr"
+    "message": "Dr."
  },
  "expirationMonth": {
    "message": "Mês de expiração"
@ -164,7 +164,7 @@
    "message": "Texto"
  },
  "cfTypeHidden": {
-    "message": "Ocultado"
+    "message": "Oculto"
  },
  "cfTypeBoolean": {
    "message": "Booleano"
@ -177,7 +177,7 @@
    "message": "Remover"
  },
  "unassigned": {
-    "message": "Não atribuido"
+    "message": "Não atribuído"
  },
  "noneFolder": {
    "message": "Em nenhuma pasta",
@ -233,10 +233,10 @@
    "message": "Gerar palavra-passe"
  },
  "checkPassword": {
-    "message": "Verifica se a palavra-passe foi exposta."
+    "message": "Verificar se a palavra-passe foi exposta."
  },
  "passwordExposed": {
-    "message": "Esta palavra-passe foi exposta $VALUE$ vez(es) em brechas de dados. Deve alterá-la.",
+    "message": "Esta palavra-passe foi exposta $VALUE$ vez(es) em violações de dados. Deve alterá-la.",
    "placeholders": {
      "value": {
        "content": "$1",
@ -245,7 +245,7 @@
    }
  },
  "passwordSafe": {
-    "message": "Esta palavra-passe não foi encontrada em nenhuma brecha de dados conhecida. Esta deve ser segura de utilizar."
+    "message": "Esta palavra-passe não foi encontrada em nenhuma violação de dados conhecida. A sua utilização deve ser segura."
  },
  "save": {
    "message": "Guardar"
@ -278,7 +278,7 @@
    "message": "Pesquisar Pasta"
  },
  "searchFavorites": {
-    "message": "Pesquisar favoritos"
+    "message": "Procurar nos favoritos"
  },
  "searchLogin": {
    "message": "Search logins",
@ -303,7 +303,7 @@
    "message": "Procurar no meu cofre"
  },
  "searchOrganization": {
-    "message": "Search organization"
+    "message": "Procurar na organização"
  },
  "searchMembers": {
    "message": "Search members"
@ -321,7 +321,7 @@
    "message": "Tipos"
  },
  "typeLogin": {
-    "message": "Credencial"
+    "message": "Início de sessão"
  },
  "typeCard": {
    "message": "Cartão"
@ -354,7 +354,7 @@
    "message": "Nome Próprio"
  },
  "middleName": {
-    "message": "Segundo Nome"
+    "message": "Segundo nome"
  },
  "lastName": {
    "message": "Apelido"
@ -363,19 +363,19 @@
    "message": "Nome completo"
  },
  "address1": {
-    "message": "Endereço 1"
+    "message": "1.ª morada"
  },
  "address2": {
-    "message": "Endereço 2"
+    "message": "2.ª morada"
  },
  "address3": {
-    "message": "Endereço 3"
+    "message": "3.ª morada"
  },
  "cityTown": {
-    "message": "Cidade / localidade"
+    "message": "Cidade / Localidade"
  },
  "stateProvince": {
-    "message": "Estado / província"
+    "message": "Estado / Província"
  },
  "zipPostalCode": {
    "message": "Código postal"
@ -562,16 +562,16 @@
    "message": "Tem a certeza de que pretende eliminar este item?"
  },
  "deletedItem": {
-    "message": "Item enviado para o lixo"
+    "message": "Item movido para o lixo"
  },
  "deletedItems": {
-    "message": "Itens enviado para o lixo"
+    "message": "Item movido para o lixo"
  },
  "movedItems": {
    "message": "Itens movidos"
  },
  "overwritePasswordConfirmation": {
-    "message": "Tem a certeza de que pretende sobrescrever a palavra-passe atual?"
+    "message": "Tem a certeza de que pretende substituir a palavra-passe atual?"
  },
  "editedFolder": {
    "message": "Pasta alterada"
@ -598,7 +598,7 @@
    "message": "A sua sessão expirou."
  },
  "logOutConfirmation": {
-    "message": "Tem a certeza de que pretende terminar a sessão?"
+    "message": "Tem a certeza de que pretende terminar sessão?"
  },
  "logOut": {
    "message": "Terminar sessão"
@ -616,7 +616,7 @@
    "message": "Inicie sessão ou crie uma nova conta para aceder ao seu cofre seguro."
  },
  "loginWithDevice": {
-    "message": "Iniciar sessão com dispositivo"
+    "message": "Iniciar sessão com o dispositivo"
  },
  "loginWithDeviceEnabledInfo": {
    "message": "O início de sessão com o dispositivo deve ser ativado nas definições da aplicação móvel do Bitwarden. Necessita de outra opção?"
@ -649,16 +649,16 @@
    "message": "O seu nome"
  },
  "yourNameDesc": {
-    "message": "Como deveremos chamá-lo?"
+    "message": "Como é que lhe devemos chamar?"
  },
  "masterPass": {
    "message": "Palavra-passe mestra"
  },
  "masterPassDesc": {
-    "message": "A palavra-passe mestra é a palavra-passe que utiliza para aceder ao seu cofre. É muito importante que não se esqueça da sua palavra-passe mestra. Não existe maneira de recuperar a palavra-passe no caso de a esquecer."
+    "message": "A palavra-passe mestra é a palavra-passe que utiliza para aceder ao seu cofre. É muito importante que não se esqueça da sua palavra-passe mestra. Não há forma de recuperar a palavra-passe no caso de a esquecer."
  },
  "masterPassImportant": {
-    "message": "A palavras-passe mestra não pode ser recuperada se a esquecer!"
+    "message": "A sua palavra-passe mestra não pode ser recuperada se a esquecer!"
  },
  "masterPassHintDesc": {
    "message": "Uma dica da palavra-passe mestra pode ajudá-lo a lembrar-se da sua palavra-passe, caso se esqueça dela."
@ -831,7 +831,7 @@
    "message": "Início de sessão indisponível"
  },
  "noTwoStepProviders": {
-    "message": "Esta conta tem a verificação de dois passos configurada, no entanto, nenhum dos fornecedores de dois passos configurados é suportado por este navegador web."
+    "message": "Esta conta tem a verificação de dois passos configurada, no entanto, nenhum dos fornecedores da verificação de dois passos configurada é suportado por este navegador web."
  },
  "noTwoStepProviders2": {
    "message": "Por favor utilize um navegador web suportado (tal como o Chrome) e/ou adicione provedores adicionais que são melhor suportados entre navegadores web (tal como uma aplicação de autenticador)."
@ -859,11 +859,11 @@
    "message": "Utilize uma YubiKey para aceder à sua conta. Funciona com YubiKey série 4, série 5, e dispositivos NEO."
  },
  "duoDesc": {
-    "message": "Verifique com Duo Security utilizando a aplicação Duo Mobile, SMS, chamada telefónica, ou chave de segurança U2F.",
+    "message": "Verifique com a Duo Security utilizando a aplicação Duo Mobile, SMS, chamada telefónica ou chave de segurança U2F.",
    "description": "'Duo Security' and 'Duo Mobile' are product names and should not be translated."
  },
  "duoOrganizationDesc": {
-    "message": "Verifique com Duo Security para a sua organização utilizando a aplicação Duo Mobile, SMS, chamada telefónica, ou chave de segurança U2F.",
+    "message": "Verifique com a Duo Security para a sua organização utilizando a aplicação Duo Mobile, SMS, chamada telefónica, ou chave de segurança U2F.",
    "description": "'Duo Security' and 'Duo Mobile' are product names and should not be translated."
  },
  "u2fDesc": {
@ -885,7 +885,7 @@
    "message": "Email"
  },
  "emailDesc": {
-    "message": "Os códigos de verificação vão ser enviados por email para si."
+    "message": "Os códigos de verificação ser-lhe-ão enviados por e-mail."
  },
  "continue": {
    "message": "Continuar"
@ -897,7 +897,7 @@
    "message": "Organizações"
  },
  "moveToOrgDesc": {
-    "message": "Escolha uma organização para a qual deseja mover este item. A mudança para uma organização transfere a propriedade do item para essa organização. Deixará de ser o proprietário directo deste item uma vez que tenha sido movido."
+    "message": "Escolha uma organização para a qual pretende mover este item. Mover para uma organização transfere a propriedade do item para essa organização. Deixará de ser o proprietário directo deste item depois de este ter sido movido."
  },
  "moveManyToOrgDesc": {
    "message": "Escolha uma organização para a qual deseja mover este item. A mudança para uma organização transfere a propriedade do item para essa organização. Deixará de ser o proprietário directo deste item uma vez que tenha sido movido."
@ -906,7 +906,7 @@
    "message": "Edite as coleções em que este item está a ser partilhado. Apenas utilizadores da organização com acesso a estas coleções podem ver este item."
  },
  "deleteSelectedItemsDesc": {
-    "message": "Selecionou $COUNT$ item(s) para eliminar. Tem a certeza de que pretende eliminar todos estes itens?",
+    "message": "Serão movidos $COUNT$ item(ns) para o lixo.",
    "placeholders": {
      "count": {
        "content": "$1",
@ -968,10 +968,10 @@
    "message": "Esta exportação contém os seus dados do cofre num formato desencriptado. Não deve armazenar ou enviar o ficheiro exportado através de canais inseguros (como email). Elimine-o imediatamente após o utilizar."
  },
  "encExportKeyWarningDesc": {
-    "message": "Esta exportação criptografa seus dados usando a chave de criptografia da sua conta. Se alguma vez mudar a chave de criptografia da sua conta, deve exportar novamente, já que não será capaz de descriptografar este arquivo de exportação."
+    "message": "Esta exportação encripta os seus dados utilizando a chave de encriptação da sua conta. Se alguma vez mudar a chave de encriptação da sua conta, deve exportar novamente, uma vez que não conseguirá desencriptar este ficheiro de exportação."
  },
  "encExportAccountWarningDesc": {
-    "message": "As chaves de encriptação de conta são únicas para cada conta de utilizador Bitwarden, pelo que não se pode importar uma exportação encriptada para uma conta diferente."
+    "message": "As chaves de encriptação da conta são únicas para cada conta de utilizador Bitwarden, pelo que não é possível importar uma exportação encriptada para uma conta diferente."
  },
  "export": {
    "message": "Exportar"
@ -1135,7 +1135,7 @@
    "message": "Nova palavra-passe mestra"
  },
  "confirmNewMasterPass": {
-    "message": "Confirmar nova palavra-passe"
+    "message": "Confirmar a nova palavra-passe mestra"
  },
  "encKeySettings": {
    "message": "Definições da chave de encriptação"
@ -2685,7 +2685,7 @@
    }
  },
  "deletedItemId": {
-    "message": "Item $ID$ enviado para o lixo.",
+    "message": "Item $ID$ movido para o lixo.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -3120,10 +3120,10 @@
    "message": "Não foi possível verificar o seu email. Tente enviar um novo email de verificação."
  },
  "emailVerificationRequired": {
-    "message": "Verificação de Email Necessária"
+    "message": "Verificação de e-mail necessária"
  },
  "emailVerificationRequiredDesc": {
-    "message": "Precisa verificar o seu email para usar esta funcionalidade."
+    "message": "É necessário verificar o seu e-mail para utilizar esta funcionalidade."
  },
  "updateBrowser": {
    "message": "Atualizar navegador"
@ -3159,7 +3159,7 @@
    }
  },
  "rememberEmail": {
-    "message": "Memorizar email"
+    "message": "Memorizar e-mail"
  },
  "recoverAccountTwoStepDesc": {
    "message": "Se não conseguir aceder à sua conta através dos seus métodos normais de início de sessão de dois passos, pode utilizar o seu código de recuperação de dois passos para desativar todos os provedores de início de sessão de dois passos da sua conta."
@ -3204,7 +3204,7 @@
    "message": "As contas de utilizadores permanecerão ativas após a exclusão, mas não estarão mais associadas a essa organização."
  },
  "deletingOrganizationIsPermanentWarning": {
-    "message": "A exclusão de $ORGANIZATION$ é permanente e irreversível.",
+    "message": "A eliminação de $ORGANIZATION$ é permanente e irreversível.",
    "placeholders": {
      "organization": {
        "content": "$1",
@ -3471,10 +3471,10 @@
    "message": "Ao marcar esta caixa concorda com o seguinte:"
  },
  "acceptPoliciesRequired": {
-    "message": "Os Termos de Serviço e a Política de Privacidade não foram reconhecidos."
+    "message": "Os Termos de utilização e a Política de privacidade não foram aceites."
  },
  "termsOfService": {
-    "message": "Termos de serviço"
+    "message": "Termos de utilização"
  },
  "privacyPolicy": {
    "message": "Política de privacidade"
@ -3514,7 +3514,7 @@
    "description": "ex. Date this item was updated"
  },
  "dateCreated": {
-    "message": "Criado",
+    "message": "Criado a",
    "description": "ex. Date this item was created"
  },
  "datePasswordUpdated": {
@ -3736,10 +3736,10 @@
    "message": "Ação de expiração do cofre"
  },
  "vaultTimeoutActionLockDesc": {
-    "message": "Um cofre bloqueado requer que reintroduza a sua palavra-passe mestra para aceder novamente."
+    "message": "É necessária uma palavra-passe mestra ou outro método de desbloqueio para aceder novamente ao seu cofre."
  },
  "vaultTimeoutActionLogOutDesc": {
-    "message": "Um cofre com sessão terminada requer que se volte a autenticar para o poder aceder novamente."
+    "message": "É necessária uma nova autenticação para aceder novamente ao seu cofre."
  },
  "lock": {
    "message": "Bloquear",
@ -3852,7 +3852,7 @@
    "message": "Definir palavra-passe mestra"
  },
  "ssoCompleteRegistration": {
-    "message": "Para concluir o início de sessão com SSO, por favor defina uma palavra-passe mestra para aceder e proteger o seu cofre."
+    "message": "Para concluir o início de sessão com SSO, por favor, defina uma palavra-passe mestra para aceder e proteger o seu cofre."
  },
  "identifier": {
    "message": "Identificador"
@ -3971,7 +3971,7 @@
    "message": "Data de eliminação"
  },
  "deletionDateDesc": {
-    "message": "O envio será eliminado permanentemente na data e hora especificadas.",
+    "message": "O Send será permanentemente eliminado na data e hora especificadas.",
    "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
  },
  "expirationDate": {
@ -4023,7 +4023,7 @@
    "message": "Tem a certeza que pretende remover a senha?"
  },
  "hideEmail": {
-    "message": "Ocultar o meu endereço de correio eletrónico dos destinatários."
+    "message": "Ocultar o meu endereço de e-mail dos destinatários."
  },
  "disableThisSend": {
    "message": "Desabilite este envio para que ninguém possa aceder.",
@ -4242,7 +4242,7 @@
    "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
  },
  "sendDisabledWarning": {
-    "message": "Due to an Enterprise policy, you are only able to delete an existing Send.",
+    "message": "Devido a uma política da empresa, só é possível eliminar um Send existente.",
    "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
  },
  "sendOptions": {
@ -4396,7 +4396,7 @@
    "message": "O ficheiro que deseja enviar."
  },
  "copySendLinkOnSave": {
-    "message": "Copie o link para o partilhar para a área de transferências ao guardar."
+    "message": "Copiar o link para partilhar este Send para a minha área de transferência ao guardar."
  },
  "sendLinkLabel": {
    "message": "Enviar link",
@ -4450,7 +4450,7 @@
    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Learn more about Bitwarden Send or sign up to **try it today.**'"
  },
  "sendCreatorIdentifier": {
-    "message": "O utilizador do Bitwarden $USER_IDENTIFIER$ compartilhou o seguinte consigo",
+    "message": "O utilizador $USER_IDENTIFIER$ do Bitwarden partilhou o seguinte consigo",
    "placeholders": {
      "user_identifier": {
        "content": "$1",
@ -4466,16 +4466,16 @@
    "message": "A data de validade fornecida não é válida."
  },
  "deletionDateIsInvalid": {
-    "message": "A data de exclusão fornecida não é válida."
+    "message": "A data de eliminação fornecida não é válida."
  },
  "expirationDateAndTimeRequired": {
    "message": "Uma data e hora de expiração é necessária."
  },
  "deletionDateAndTimeRequired": {
-    "message": "É necessária uma data e hora de exclusão."
+    "message": "São necessárias uma data e uma hora de eliminação."
  },
  "dateParsingError": {
-    "message": "Ocorreu um erro ao gravar a sua data de exclusão e de validade."
+    "message": "Ocorreu um erro ao guardar as suas datas de eliminação e expiração."
  },
  "webAuthnFallbackMsg": {
    "message": "Para verificar seu 2FA por favor, clique no botão abaixo."
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "A dica da sua senha não pode ser a mesma que a sua senha."
  },
-  "enrollPasswordReset": {
-    "message": "Registar redefinição de senha"
+  "enrollAccountRecovery": {
+    "message": "Inscrever-se na recuperação de conta"
  },
-  "enrolledPasswordReset": {
-    "message": "Registada a redefinição de senha"
+  "enrolledAccountRecovery": {
+    "message": "Inscrito na recuperação de conta"
  },
-  "withdrawPasswordReset": {
-    "message": "Sair da Redefinição de Senha"
+  "withdrawAccountRecovery": {
+    "message": "Retirar-se da recuperação de conta"
  },
  "enrollPasswordResetSuccess": {
    "message": "Registado com sucesso!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Saída com sucesso!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Utilizador $ID$ registado na ajuda para redefinir senha.",
+  "eventEnrollAccountRecovery": {
+    "message": "Utilizador $ID$ inscrito na recuperação de conta.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Utilizador $ID$ removeu-se da ajuda para redefinir senha.",
+  "eventWithdrawAccountRecovery": {
+    "message": "Utilizador $ID$ retirado da recuperação de conta.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Redefinir Senha Mestra"
+  "accountRecoveryPolicy": {
+    "message": "Gestão da recuperação de contas"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Permitir que administradores redefinam senhas mestres dos membros."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recuperar contas de membros quando a palavra-passe mestra ou dispositivos de confiança são esquecidos ou perdidos. O processo de recuperação baseia-se no método de encriptação da conta."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -4613,13 +4613,13 @@
    "message": "Items that have been in trash for a while will be automatically deleted."
  },
  "passwordPrompt": {
-    "message": "Redefinir senha mestra"
+    "message": "Pedir novamente a palavra-passe mestra"
  },
  "passwordConfirmation": {
-    "message": "Confirmação da senha mestra"
+    "message": "Confirmação da palavra-passe mestra"
  },
  "passwordConfirmationDesc": {
-    "message": "This action is protected. To continue, please re-enter your master password to verify your identity."
+    "message": "Esta ação está protegida. Para continuar, por favor, reintroduza a sua palavra-passe mestra para verificar a sua identidade."
  },
  "reinviteSelected": {
    "message": "Reenviar convites"
@ -4819,19 +4819,19 @@
    "message": "Adicionar"
  },
  "updatedMasterPassword": {
-    "message": "Senha Mestra Atualizada"
+    "message": "Palavra-passe mestra guardada"
  },
  "updateMasterPassword": {
-    "message": "Atualizar Senha Mestra"
+    "message": "Atualizar palavra-passe mestra"
  },
  "updateMasterPasswordWarning": {
-    "message": "Sua senha mestra foi alterada recentemente por um administrador da sua organização. Para aceder ao cofre, precisa atualizar a sua senha mestra agora. O processo irá desconectá-lo da sessão atual, exigindo que inicie a novamente a sessão. Sessões ativas em outros dispositivos podem continuar ativas por até uma hora."
+    "message": "A sua palavra-passe mestra foi recentemente alterada por um administrador da sua organização. Para aceder ao cofre, tem de atualizar a sua palavra-passe mestra agora. Se prosseguir, sairá da sua sessão atual e terá de iniciar sessão novamente. As sessões ativas noutros dispositivos poderão continuar ativas até uma hora."
  },
  "masterPasswordInvalidWarning": {
-    "message": "Your master password does not meet the policy requirements of this organization. In order to join the organization, you must update your master password now. Proceeding will log you out of your current session, requiring you to log back in. Active sessions on other devices may continue to remain active for up to one hour."
+    "message": "A sua palavra-passe mestra não cumpre os requisitos da política desta organização. Para se juntar à organização, tem de atualizar a sua palavra-passe mestra agora. Se prosseguir, sairá da sua sessão atual e terá de voltar a iniciar sessão. As sessões ativas noutros dispositivos poderão continuar ativas até uma hora."
  },
  "updateWeakMasterPasswordWarning": {
-    "message": "Your master password does not meet one or more of your organization policies. In order to access the vault, you must update your master password now. Proceeding will log you out of your current session, requiring you to log back in. Active sessions on other devices may continue to remain active for up to one hour."
+    "message": "A sua palavra-passe mestra não cumpre uma ou mais políticas da sua organização. Para aceder ao cofre, tem de atualizar a sua palavra-passe mestra agora. Se prosseguir, sairá da sua sessão atual e terá de iniciar sessão novamente. As sessões ativas noutros dispositivos poderão continuar ativas até uma hora."
  },
  "maximumVaultTimeout": {
    "message": "Expiração do cofre"
@ -4909,10 +4909,10 @@
    "message": "Do not allow members to export their individual vault data."
  },
  "vaultExportDisabled": {
-    "message": "Exportação de cofre desabilitada"
+    "message": "Exportação do cofre removida"
  },
  "personalVaultExportPolicyInEffect": {
-    "message": "Uma ou mais políticas da organização impedem que exporte o seu cofre pessoal."
+    "message": "Uma ou mais políticas da organização impedem-no de exportar o seu cofre pessoal."
  },
  "activateAutofill": {
    "message": "Ativar o preenchimento automático"
@ -5404,7 +5404,7 @@
    "message": "A sua sessão expirou. Por favor, volte atrás e tente iniciar sessão novamente."
  },
  "exportingPersonalVaultTitle": {
-    "message": "A exportar cofre pessoal"
+    "message": "A exportar o cofre pessoal"
  },
  "exportingOrganizationVaultTitle": {
    "message": "A exportar cofre da organização"
@ -5419,7 +5419,7 @@
    }
  },
  "exportingOrganizationVaultDescription": {
-    "message": "Apenas o cofre da organização associado ao(à) $ORGANIZATION$ serão exportados. Os itens do cofre pessoal e os de outras organizações não serão incluídos.",
+    "message": "Apenas o cofre da organização associado a $ORGANIZATION$ serão exportados. Os itens do cofre pessoal e os de outras organizações não serão incluídos.",
    "placeholders": {
      "organization": {
        "content": "$1",
@ -5474,7 +5474,7 @@
    "message": "Password type"
  },
  "regenerateUsername": {
-    "message": "Regerar nome de utilizador"
+    "message": "Regenerar nome de utilizador"
  },
  "generateUsername": {
    "message": "Gerar nome de utilizador"
@ -5593,7 +5593,7 @@
    }
  },
  "premiumSubcriptionRequired": {
-    "message": "Subscrição premium necessária"
+    "message": "É necessária uma subscrição Premium"
  },
  "scim": {
    "message": "Provisionamento de SCIM",
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "A entrada não deve conter apenas espaços em branco.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dispensar"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
-    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionStart": {
+    "message": "Uma vez autenticados, os membros desencriptam os dados do cofre utilizando uma chave armazenada no seu dispositivo. A",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "política de gestão da recuperação de contas",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "com inscrição automática será ativada quando esta opção for utilizada.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recuperar conta"
+  },
+  "updatedTempPassword": {
+    "message": "O utilizador atualizou uma palavra-passe emitida através da recuperação de conta."
  }
 }
--- a/apps/web/src/locales/ro/messages.json
+++ b/apps/web/src/locales/ro/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Indiciul dvs. de parolă nu poate fi aceeași cu parola."
  },
-  "enrollPasswordReset": {
-    "message": "Înscrieți-vă în resetarea parolei"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Înscris în resetarea parolei"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Retragere din resetarea parolei"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Înregistrare reușită!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Retragere reușită!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Utilizator $ID$ s-a înscris în asistența de resetare a parolei.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Utilizatorul $ID$ s-a retras din asistența pentru resetarea parolei.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Înscrierea va permite administratorilor organizației să vă schimbe parola principală"
  },
-  "resetPasswordPolicy": {
-    "message": "Resetarea parolei principale"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Permiteți administratorilor să reseteze parolele principale ale membrilor."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Utilizatorii din organizație vor trebui să se înregistreze singuri sau, să fie înregistrați automat, înainte ca administratorii să le poată reseta parola principală."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/ru/messages.json
+++ b/apps/web/src/locales/ru/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Подсказка для пароля не может совпадать с паролем."
  },
-  "enrollPasswordReset": {
-    "message": "Записаться на сброс пароля"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Запрос на сброс пароля зарегистрирован"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Отказаться от сброса пароля"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Записано успешно!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Запись успешно отменена!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Пользователь $ID$ зарегистрирован на сброс пароля.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Пользователь $ID$ отказался от сброса пароля.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Регистрация позволит администраторам организации изменять ваш мастер-пароль"
  },
-  "resetPasswordPolicy": {
-    "message": "Сброс мастер-пароля"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Разрешить администраторам сбрасывать мастер-пароли пользователей."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Пользователи организации должны зарегистрироваться самостоятельно или быть зарегистрированными автоматически, чтобы администраторы могли сбросить их мастер-пароль."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Отклонить"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Шифрование доверенного устройства"
  },
-  "memberDecryptionTdeDescStart": {
-    "message": "После аутентификации участники расшифровывают данные хранилища с помощью ключа, хранящегося на их устройстве.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionStart": {
+    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "При использовании этой опции",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "включается политика сброса мастер-пароля с автоматической регистрацией.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "with automatic enrollment will turn on when this option is used.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/si/messages.json
+++ b/apps/web/src/locales/si/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/sk/messages.json
+++ b/apps/web/src/locales/sk/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Nápoveda pre heslo nemôže byť rovnaká ako heslo."
  },
-  "enrollPasswordReset": {
-    "message": "Zaregistrovať sa pre obnovu hesla"
+  "enrollAccountRecovery": {
+    "message": "Zapísať sa na obnovu konta"
  },
-  "enrolledPasswordReset": {
-    "message": "Zaregistrovaný pre obnovu hesla"
+  "enrolledAccountRecovery": {
+    "message": "Zapísaný na obnovu konta"
  },
-  "withdrawPasswordReset": {
-    "message": "Odhlásiť sa z obnovy hesla"
+  "withdrawAccountRecovery": {
+    "message": "Odhlásiť sa z obnovy konta"
  },
  "enrollPasswordResetSuccess": {
    "message": "Registrácia úspešná!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Odhlásenie úspešné!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Používateľ $ID$ sa registroval na pomoc s obnovou hesla.",
+  "eventEnrollAccountRecovery": {
+    "message": "Používateľ $ID$ zapísaný na obnovu konta.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Používateľ $ID$ sa odhlásil z pomoci obnovy hesla.",
+  "eventWithdrawAccountRecovery": {
+    "message": "Používateľ $ID$ sa odhlásil z obnovy konta.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Registrácia umožní správcom organizácie zmeniť vaše hlavné heslo. Naozaj sa chcete zaregistrovať?"
  },
-  "resetPasswordPolicy": {
-    "message": "Hlavné heslo obnovené"
+  "accountRecoveryPolicy": {
+    "message": "Správa obnovy konta"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Umožní správcom v organizácii resetovať hlavné heslo používateľov organizácie."
+  "accountRecoveryPolicyDescription": {
+    "message": "Obnovte prístup k členským kontám ktoré stratili hlavné heslo alebo prišli o dôveryhodné zariadenia. Proces obnovy je založený na šifrovacej metóde konta."
  },
  "resetPasswordPolicyWarning": {
    "message": "Používatelia v organizácii sa budú musieť sami zaregistrovať alebo byť automaticky zaregistrovaní predtým, ako budú môcť správcovia resetovať ich hlavné heslo."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
-    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionStart": {
+    "message": "Po autentifikácii, členovia budú dešifrovať dáta v trezore za pomoci kľúča uloženého na ich zariadení.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Obnoviť účet"
+  },
+  "updatedTempPassword": {
+    "message": "Použivateľ aktualizoval heslo ktoré bolo vydané pri obnove konta."
  }
 }
--- a/apps/web/src/locales/sl/messages.json
+++ b/apps/web/src/locales/sl/messages.json
@ -1141,13 +1141,13 @@
    "message": "Nastavitve kodirnega ključa"
  },
  "kdfAlgorithm": {
-    "message": "KDF algoritem"
+    "message": "Algoritem KDF"
  },
  "kdfIterations": {
-    "message": "KDF iteracije"
+    "message": "Ponovitev KDF"
  },
  "kdfIterationsDesc": {
-    "message": "Higher KDF iterations can help protect your master password from being brute forced by an attacker. We recommend a value of $VALUE$ or more.",
+    "message": "Višje število ponovitev KDF lahko pomaga pri zaščiti vašega glavnega gesla pred napadi z grobo silo. Priporočamo vsaj $VALUE$ ponovitev.",
    "placeholders": {
      "value": {
        "content": "$1",
@ -1156,7 +1156,7 @@
    }
  },
  "kdfIterationsWarning": {
-    "message": "Setting your KDF iterations too high could result in poor performance when logging into (and unlocking) Bitwarden on slower or older devices. We recommend that you increase the value in increments of $INCREMENT$ and then test all of your devices.",
+    "message": "Če nastavite previsoko število ponovitev KDF, bo Bitwarden morda postal počasen pri prijavi (in odklepanju) na starejših in počasnejših napravah. Priporočamo, da to vrednost povečujete v korakih po $INCREMENT$ in vsakič preskusite vse naprave.",
    "placeholders": {
      "increment": {
        "content": "$1",
@ -2089,7 +2089,7 @@
    "message": "Odstrani hrambo"
  },
  "subscriptionStorage": {
-    "message": "Your subscription has a total of $MAX_STORAGE$ GB of encrypted file storage. You are currently using $USED_STORAGE$.",
+    "message": "Vaša naročnina vam omogoča hrambo $MAX_STORAGE$ GB šifriranih podatkov. Trenutno uporabljate $USED_STORAGE$.",
    "placeholders": {
      "max_storage": {
        "content": "$1",
@ -2152,7 +2152,7 @@
    }
  },
  "gbStorageAdd": {
-    "message": "GB of storage to add"
+    "message": "Povečaj hrambo za toliko GB:"
  },
  "gbStorageRemove": {
    "message": "GB of storage to remove"
@ -3171,7 +3171,7 @@
    "message": "Two-step login turned off on your account."
  },
  "learnMore": {
-    "message": "Learn more"
+    "message": "Več o tem"
  },
  "deleteRecoverDesc": {
    "message": "Enter your email address below to recover and delete your account."
@ -3510,11 +3510,11 @@
    "message": "On browser refresh"
  },
  "dateUpdated": {
-    "message": "Updated",
+    "message": "Spremenjeno",
    "description": "ex. Date this item was updated"
  },
  "dateCreated": {
-    "message": "Created",
+    "message": "Ustvarjeno",
    "description": "ex. Date this item was created"
  },
  "datePasswordUpdated": {
@ -3621,7 +3621,7 @@
    "message": "Your API key has full access to the organization. It should be kept secret."
  },
  "userApiKeyDesc": {
-    "message": "Your API key can be used to authenticate in the Bitwarden CLI."
+    "message": "Svoj API-ključ lahko uoprabljate za prijavo pri uporabi ukazne vrstice (CLI)."
  },
  "userApiKeyWarning": {
    "message": "Your API key is an alternative authentication mechanism. It should be kept secret."
@ -3655,7 +3655,7 @@
    "message": "Dolžina vsaj"
  },
  "clone": {
-    "message": "Clone"
+    "message": "Podvoji"
  },
  "masterPassPolicyTitle": {
    "message": "Zahteve za glavno geslo"
@ -3930,10 +3930,10 @@
    "message": "Organization owners and admins are exempt from this policy's enforcement."
  },
  "sendTypeFile": {
-    "message": "File"
+    "message": "Datoteka"
  },
  "sendTypeText": {
-    "message": "Text"
+    "message": "Besedilo"
  },
  "createSend": {
    "message": "Nova pošiljka",
@ -4070,7 +4070,7 @@
    "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
  },
  "noSendsInList": {
-    "message": "There are no Sends to list.",
+    "message": "Ni pošiljk.",
    "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
  },
  "emergencyAccess": {
@ -4393,10 +4393,10 @@
    "message": "The text you want to Send."
  },
  "sendFileDesc": {
-    "message": "The file you want to Send."
+    "message": "Datoteka, ki jo želite poslati kot pošiljko."
  },
  "copySendLinkOnSave": {
-    "message": "Copy the link to share this Send to my clipboard upon save."
+    "message": "Ko shranim, skopiraj povezavo za deljenje te pošiljke v odložišče."
  },
  "sendLinkLabel": {
    "message": "Povezava pošiljke",
@ -4411,14 +4411,14 @@
    "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
  },
  "sendAccessTaglineLearnMore": {
-    "message": "Learn more about",
+    "message": "Preberite več o:",
    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read '**Learn more about** Bitwarden Send or sign up to try it today.'"
  },
  "sendVaultCardProductDesc": {
    "message": "Share text or files directly with anyone."
  },
  "sendVaultCardLearnMore": {
-    "message": "Learn more",
+    "message": "Več o tem",
    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read '**Learn more**, see how it works, or try it now. '"
  },
  "sendVaultCardSee": {
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Ponastavitev glavnega gesla"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -4924,7 +4924,7 @@
    "message": "Compromised or untrusted websites can exploit auto-fill on page load."
  },
  "learnMoreAboutAutofill": {
-    "message": "Learn more about auto-fill"
+    "message": "Več o samodejnem izpolnjevanju"
  },
  "selectType": {
    "message": "Select SSO type"
@ -6601,10 +6601,10 @@
    "message": "Group/User"
  },
  "lowKdfIterations": {
-    "message": "Low KDF Iterations"
+    "message": "Nizko število ponovitev KDF"
  },
  "updateLowKdfIterationsDesc": {
-    "message": "Update your encryption settings to meet new security recommendations and improve account protection."
+    "message": "Popravite svoje nastavitve šifriranja, da bodo v skladu z novimi priporočili za varnost, in izboljšajte zaščito svojega računa."
  },
  "changeKdfLoggedOutWarning": {
    "message": "Po tem dejanju boste odjavljeni iz vseh aktivnih sej (na vseh napravah). Prijaviti se boste morali ponovno in zaključiti nastavitev dvostopenjske prijave. Priporočamo vam, da pred tem izvozite svoje podatke, da jih v tem procesu ne bi izgubili."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6789,7 +6793,7 @@
    "message": "Require existing members to change their passwords"
  },
  "region": {
-    "message": "Region"
+    "message": "Regija"
  },
  "eu": {
    "message": "EU",
@ -6808,21 +6812,27 @@
    "description": "The message shown to the user when bulk deleting projects and the user doesn't have access to some projects."
  },
  "updateKdfSettings": {
-    "message": "Update KDF settings"
+    "message": "Spremeni nastavitve KDF"
  },
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/sr/messages.json
+++ b/apps/web/src/locales/sr/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Ваша помоћ за лозинку не може да буде иста као лозинка."
  },
-  "enrollPasswordReset": {
-    "message": "Упишите се ресетовање лозинке"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Уписани за ресетовање лозинке"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Повуците се са ресетовања лозинке"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Успешно уписвање!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Успешно отписивање!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Корисник $ID$ је уписан у помоћ за ресетовање лозинке.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Корисник $ID$ је укинут са помоћа за ресетовање лозинке.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Упис ће омогућити администраторима организације да промене вашу главну лозинку. Јесте ли сигурни да желите да се упишете?"
  },
-  "resetPasswordPolicy": {
-    "message": "Ресетовање главне лозинке"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Дозволи администраторе организације да ресетују корисничку главну лозинку за организацију."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Корисници у организацији ће се морати само-уписати или се аутоматски уписати пре него што администратори могу да ресетују њихову главну лозинку."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Одбаци"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Шифровање поузданог уређаја"
  },
-  "memberDecryptionTdeDescStart": {
-    "message": "Када се аутентификују, чланови ће дешифровати податке из сефљ користећи кључ сачуван на њиховом уређају.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionStart": {
+    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "политика ресетовања главне лозинке",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "са аутоматским уписом ће се укључити када се користи ова опција.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "with automatic enrollment will turn on when this option is used.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/sr_CS/messages.json
+++ b/apps/web/src/locales/sr_CS/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/sv/messages.json
+++ b/apps/web/src/locales/sv/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Din lösenordsledtråd får inte vara samma som ditt lösenord."
  },
-  "enrollPasswordReset": {
-    "message": "Delta i lösenordsåterställning"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Deltar i lösenordsåterställning"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Utträd från lösenordsåterställning"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Deltagandet lyckades!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Utträdet lyckades!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Användare $ID$ anmälde sig till hjälp för återställning av lösenord.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Användaren $ID$ drog sig tillbaka från hjälp med återställning av lösenord.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Deltagande tillåter organisationsadministratörer att ändra ditt huvudlösenord. Är du säker på att du vill delta?"
  },
-  "resetPasswordPolicy": {
-    "message": "Återställning av huvudlösenord"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Tillåt administratörer i organisationen att återställa organisationens användares huvudlösenord."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Användare i organisationen måste själva delta eller delta automatiskt innan administratörer kan återställa deras huvudlösenord."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/te/messages.json
+++ b/apps/web/src/locales/te/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/th/messages.json
+++ b/apps/web/src/locales/th/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Your password hint cannot be the same as your password."
  },
-  "enrollPasswordReset": {
-    "message": "Enroll in password reset"
+  "enrollAccountRecovery": {
+    "message": "Enroll in account recovery"
  },
-  "enrolledPasswordReset": {
-    "message": "Enrolled in password reset"
+  "enrolledAccountRecovery": {
+    "message": "Enrolled in account recovery"
  },
-  "withdrawPasswordReset": {
-    "message": "Withdraw from password reset"
+  "withdrawAccountRecovery": {
+    "message": "Withdraw from account recovery"
  },
  "enrollPasswordResetSuccess": {
    "message": "Enrollment success!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Withdrawal success!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "User $ID$ enrolled in password reset.",
+  "eventEnrollAccountRecovery": {
+    "message": "User $ID$ enrolled in account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "User $ID$ withdrew from password reset.",
+  "eventWithdrawAccountRecovery": {
+    "message": "User $ID$ withdrew from account recovery.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Enrollment will allow organization administrators to change your master password"
  },
-  "resetPasswordPolicy": {
-    "message": "Master password reset"
+  "accountRecoveryPolicy": {
+    "message": "Account recovery administration"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Allow admins to reset master passwords for members."
+  "accountRecoveryPolicyDescription": {
+    "message": "Recover member accounts when master password or trusted devices are forgotten or lost. The recovery processes is based on the account encryption method."
  },
  "resetPasswordPolicyWarning": {
    "message": "Members in the organization will need to self-enroll or be auto-enrolled before administrators can reset their master password."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Input must not contain only whitespace.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Dismiss"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Trusted device encryption"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Once authenticated, members will decrypt vault data using a key stored on their device. The",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "master password reset policy",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "account recovery administration policy",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
+  "memberDecryptionTdeDescriptionEnd": {
    "message": "with automatic enrollment will turn on when this option is used.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Recover account"
+  },
+  "updatedTempPassword": {
+    "message": "User updated a password issued through account recovery."
  }
 }
--- a/apps/web/src/locales/tr/messages.json
+++ b/apps/web/src/locales/tr/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Parola ipucunuz parolanızla aynı olamaz."
  },
-  "enrollPasswordReset": {
-    "message": "Parola Sıfırlama Kaydı Yaptır"
+  "enrollAccountRecovery": {
+    "message": "Hesap kurtarmaya kaydol"
  },
-  "enrolledPasswordReset": {
-    "message": "Parola Sıfırlama Kaydı Yaptırıldı"
+  "enrolledAccountRecovery": {
+    "message": "Hesap kurtarmaya kaydolundu"
  },
-  "withdrawPasswordReset": {
-    "message": "Parola Sıfırlamadan Geri Çekil"
+  "withdrawAccountRecovery": {
+    "message": "Hesap kurtarmadan ayrıl"
  },
  "enrollPasswordResetSuccess": {
    "message": "Kayıt başarılı!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Çekilme başarılı!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "$ID$ kullanıcısı parola sıfırlama desteği için kayıt yaptırdı.",
+  "eventEnrollAccountRecovery": {
+    "message": "$ID$ kullanıcısı, hesap kurtarmaya kaydoldu.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "$ID$ adlı kullanıcı parola sıfırlamadan geri çekildi.",
+  "eventWithdrawAccountRecovery": {
+    "message": "$ID$ kullanıcısı hesap kurtarmadan ayrıldı.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Katılmak kuruluş yöneticilerinin ana parolanızı değiştirmesine izin verir"
  },
-  "resetPasswordPolicy": {
-    "message": "Ana parola sıfırlama"
+  "accountRecoveryPolicy": {
+    "message": "Hesap kurtarma yönetimi"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Kuruluş yöneticilerinin üyelerin ana parolalarını sıfırlamasına izin ver."
+  "accountRecoveryPolicyDescription": {
+    "message": "Ana parola veya güvenilir cihazlar unutulur veya kaybolursa üye hesaplarını kurtarabilirsiniz. Kurtarma işlemleri, hesap şifreleme yöntemini temel alır."
  },
  "resetPasswordPolicyWarning": {
    "message": "Yöneticilerin kullanıcıların ana parolalarını sıfırlayabilmesi önce kuruluştaki kullanıcıların kendileri katılmaları veya otomatik eklenmeleri gerekir."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Girdi yalnızca boşluktan ibaret olamaz.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Kapat"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Güvenilir cihaz şifrelemesi"
  },
-  "memberDecryptionTdeDescStart": {
-    "message": "Bir kez imliği doğrulandıktan sonra üyeler, cihazlarında saklanan bir anahtarı kullanarak kasa verilerinin şifresini çözebilir.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionStart": {
+    "message": "Üyeler kimliklerini doğruladıktan sonra, cihazlarında saklanan anahtarı kullanarak kasa verilerinin şifresini çözebilecektir. Bu seçeneği kullanırsanız",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "ana parola sıfırlama ilkesi",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "hesap kurtarma yönetim ilkesi",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "Bu seçenek kullanıldığında otomatik kayıt ile açılacaktır.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "otomatik kayıtla birlikte açılacaktır.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Hesabı kurtar"
+  },
+  "updatedTempPassword": {
+    "message": "Kullanıcı, hesap kurtarma yoluyla verilen bir parolayı güncelledi."
  }
 }
--- a/apps/web/src/locales/uk/messages.json
+++ b/apps/web/src/locales/uk/messages.json
@ -4492,14 +4492,14 @@
  "hintEqualsPassword": {
    "message": "Підказка для пароля не може бути такою самою, як ваш пароль."
  },
-  "enrollPasswordReset": {
-    "message": "Подати запит на скидання пароля"
+  "enrollAccountRecovery": {
+    "message": "Розгорнути на відновлення облікового запису"
  },
-  "enrolledPasswordReset": {
-    "message": "Запит на скидання пароля подано"
+  "enrolledAccountRecovery": {
+    "message": "Розгорнуто на відновлення облікового запису"
  },
-  "withdrawPasswordReset": {
-    "message": "Відкликати запит на скидання пароля"
+  "withdrawAccountRecovery": {
+    "message": "Відкликати відновлення облікового запису"
  },
  "enrollPasswordResetSuccess": {
    "message": "Запит успішно подано!"
@ -4507,8 +4507,8 @@
  "withdrawPasswordResetSuccess": {
    "message": "Відмову успішно прийнято!"
  },
-  "eventEnrollPasswordReset": {
-    "message": "Користувач $ID$ подав запит на скидання пароля.",
+  "eventEnrollAccountRecovery": {
+    "message": "Користувача $ID$ розгорнуто на відновлення облікового запису.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4516,8 +4516,8 @@
      }
    }
  },
-  "eventWithdrawPasswordReset": {
-    "message": "Користувач $ID$ відмовився від скидання пароля.",
+  "eventWithdrawAccountRecovery": {
+    "message": "Для користувача $ID$ відкликано відновлення облікового запису.",
    "placeholders": {
      "id": {
        "content": "$1",
@ -4576,11 +4576,11 @@
  "resetPasswordEnrollmentWarning": {
    "message": "Розгортання дозволить адміністраторам організації змінювати ваш головний пароль"
  },
-  "resetPasswordPolicy": {
-    "message": "Скидання головного пароля"
+  "accountRecoveryPolicy": {
+    "message": "Адміністрування відновлення облікового запису"
  },
-  "resetPasswordPolicyDescription": {
-    "message": "Дозволити адміністраторам скидати головний пароль учасників."
+  "accountRecoveryPolicyDescription": {
+    "message": "Відновлення облікових записів учасників у разі втрати головного пароля або довірених пристроїв. Процес відновлення базується на методі шифрування облікового запису."
  },
  "resetPasswordPolicyWarning": {
    "message": "Учасники організації мають подати запит самостійно, або отримати автоматичне подання запиту, перш ніж адміністратори зможуть скинути їхній пароль."
@ -6775,6 +6775,10 @@
      }
    }
  },
+  "inputTrimValidator": {
+    "message": "Введене значення не повинно містити лише пробіл.",
+    "description": "Notification to inform the user that a form's input can't contain only whitespace."
+  },
  "dismiss": {
    "message": "Відхилити"
  },
@ -6813,16 +6817,22 @@
  "trustedDeviceEncryption": {
    "message": "Шифрування досвіреного пристрою"
  },
-  "memberDecryptionTdeDescStart": {
+  "memberDecryptionTdeDescriptionStart": {
    "message": "Після авторизації учасники розшифровуватимуть дані сховища з використанням ключа, збереженого на їхньому пристрої.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescLink": {
-    "message": "Політика скидання головного пароля",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionLink": {
+    "message": "Політика адміністрування відновлення облікових записів",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
  },
-  "memberDecryptionTdeDescEnd": {
-    "message": "з автоматичним розгортанням увімкнеться, якщо використовується ця опція.",
-    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The master password reset policy with automatic enrollment will turn on when this option is used.'"
+  "memberDecryptionTdeDescriptionEnd": {
+    "message": "з автоматичним розгортанням активується, якщо використовується ця опція.",
+    "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Once authenticated, members will decrypt vault data using a key stored on their device. The account recovery administration policy with automatic enrollment will turn on when this option is used.'"
+  },
+  "recoverAccount": {
+    "message": "Відновити обліковий запис"
+  },
+  "updatedTempPassword": {
+    "message": "Користувач оновив пароль під час відновлення облікового запису."
  }
 }
--- a/Show More
+++ b/Show More