If the account exists, a recovery email will be sent without revealing whether the address is registered.