check if the user knows the correct recovery password before changing the recovery key settings