Set a new passwordNot this page
Not Verify email
Confirming a new account is /verify. Reset does not set emailVerifiedAt.
After signup, web lands on /verify. That flow uses a different sha256 digest than password reset.
A valid password update does not confirm the email.