> The main problem I run into is where I want to be logged in to the site and their mobile app and they log out all devices when the password is reset. On a te

> The main problem I run into is where I want to be logged in to the site and their mobile app and they log out all devices when the password is reset. On a technical level, most likely it's that their backend considers all cookies generated prior to the reset to be invalid. In that case, a solution could be to "steal" (from yourself) the one valid cookie that came out of the reset, and place it into your various devices/browsers. So long as they don't hash the user agent string into it or something (which I assume they wouldn't, since the validity of the session survives browser upgrades). Desktop browsers (having dev tools) will let you get the cookies and add said "stolen" cookies. Unfortunately, you'll have a hard time with mobile apps.