I believe there is a section about this in the docs, in the customizations for the email/password recipe