diff --git a/Persistence/User/Handler.php b/Persistence/User/Handler.php
index 3dc867c4a..fa6c1d36a 100644
--- a/Persistence/User/Handler.php
+++ b/Persistence/User/Handler.php
@@ -65,6 +65,17 @@ public function loadByLogin($login);
      */
     public function loadByEmail($email);
 
+    /**
+     * Loads user with user hash.
+     *
+     * @param string $hash
+     *
+     * @throws \eZ\Publish\API\Repository\Exceptions\NotFoundException If user is not found
+     *
+     * @return \eZ\Publish\SPI\Persistence\User
+     */
+    public function loadUserByToken($hash);
+
     /**
      * Update the user information specified by the user struct.
      *
@@ -72,6 +83,20 @@ public function loadByEmail($email);
      */
     public function update(User $user);
 
+    /**
+     * Update the user information specified by the user token struct.
+     *
+     * @param \eZ\Publish\SPI\Persistence\User\UserTokenUpdateStruct $userTokenUpdateStruct
+     */
+    public function updateUserToken(UserTokenUpdateStruct $userTokenUpdateStruct);
+
+    /**
+     * Expires user token with user hash.
+     *
+     * @param string $hash
+     */
+    public function expireUserToken($hash);
+
     /**
      * Delete user with the given ID.
      *
diff --git a/Persistence/User/UserTokenUpdateStruct.php b/Persistence/User/UserTokenUpdateStruct.php
new file mode 100644
index 000000000..4e9cb1611
--- /dev/null
+++ b/Persistence/User/UserTokenUpdateStruct.php
@@ -0,0 +1,39 @@
+<?php
+
+/**
+ * File containing the UserTokenUpdateStruct class.
+ *
+ * @copyright Copyright (C) eZ Systems AS. All rights reserved.
+ * @license For full copyright and license information view LICENSE file distributed with this source code.
+ */
+namespace eZ\Publish\SPI\Persistence\User;
+
+use eZ\Publish\SPI\Persistence\ValueObject;
+
+/**
+ * This update struct is used to update User Tokens (formerly known as User account keys).
+ */
+class UserTokenUpdateStruct extends ValueObject
+{
+    /**
+     * Hash key date for user account.
+     *
+     * @var string
+     */
+    public $hashKey;
+
+    /**
+     * Time to which the token is valid
+     * Unix timestamp.
+     *
+     * @var int
+     */
+    public $time;
+
+    /**
+     * The user to whom the token belongs.
+     *
+     * @var int
+     */
+    public $userId;
+}