diff --git a/src/recovery.php b/src/recovery.php
new file mode 100644
index 0000000..34a41df
--- /dev/null
+++ b/src/recovery.php
@@ -0,0 +1,44 @@
+<?php
+require_once("core.php");
+
+if (!security::checkParams("GET", [
+  ["token", security::PARAM_NEMPTY]
+])) {
+  security::go("index.php?msg=unexpected");
+}
+
+$token = $_GET["token"];
+
+$recovery = recovery::getUnusedRecovery($token);
+if ($recovery === false) security::go("index.php?msg=recovery2failed");
+?>
+<!DOCTYPE html>
+<html>
+<head>
+  <title><?php echo $conf["appName"]; ?></title>
+  <?php visual::includeHead(); ?>
+  <link rel="stylesheet" href="css/index.css">
+  <script src="js/index.js"></script>
+</head>
+<?php visual::printBodyTag(); ?>
+  <div class="login mdl-shadow--4dp">
+    <h2>Restablecer contraseña</h2>
+    <form action="dorecovery.php" method="POST" autocomplete="off" id="formulario">
+      <input type="hidden" name="token" value="<?=security::htmlsafe($recovery["token"])?>">
+      <div class="mdl-textfield mdl-js-textfield mdl-textfield--floating-label">
+        <input class="mdl-textfield__input" type="password" name="password" id="password" autocomplete="off" data-required>
+        <label class="mdl-textfield__label" for="password">Contraseña</label>
+      </div>
+      <p class="mdl-color-text--grey-600"><?=security::htmlsafe(security::$passwordHelperText)?></p>
+
+      <p><button type="submit" class="mdl-button mdl-js-button mdl-button--raised mdl-js-ripple-effect mdl-button--accent">Restablecer</button></p>
+		</form>
+  </div>
+
+  <?php
+  visual::smartSnackbar([
+    ["weakpassword", security::$passwordHelperText]
+  ]);
+  ?>
+</body>
+</html>