A clever combination of front-end and back-end solutions is needed to solve the problem of browsers such as Chrome mistakenly saving new passwords against recovery codes instead of the intended user email addresses. Browsers can be guided to correctly associate new passwords by using JavaScript to dynamically inject fields and change form properties, in conjunction with PHP for server-side validation.