Ideas
Experts

Private email recovery

ProtonMail stores users' recovery emails in plaintext, and recently had to hand over an activist's recovery email (iCloud) to the Spanish authorities. Instead, it could store some seeded hash of the recovery email, send the seed to the recovery email, and require a zkEmail proof to prove knowledge of preimage + control of the recovery email. Private state: plaintext recovery email address

What to explore

This is an early-stage concept. Use the linked prototype and source code, when available, to assess its assumptions, privacy properties, and practical limitations before building on it.