Password Reset Workflow

Posted By Al Bsharah 14/05/2010 18:52:07
Author Message
Al Bsharah
Posted 14/05/2010 18:52:07
If I only had a Life
If I only had a Life - (2,643 reputation)
Group: Moderators
Last Active: 15/09/2012 08:21:24
Posts: 361, Visits: 3,661
Hi folks,

I'd like to see this workflow change a bit.  Right now, IF simply emails in clear text someone's private password.  If a person uses the same or similar password on multiple sites, a hacker can have a field day if they manage to compromise the user's email. 

Instead of sending the actual password, generate a link the user will click on to type in a new password.  This will protect the original password from being discovered.  You could also generate a temporary password and pass that on in an email, but a link is a little cleaner and easier for the end-user.  Plus, the process forces them to re-enter a password they're going to remember.

Thanks!
AL



Al Bsharah: Twitter / Blog
Aholics.com: Twitter / Facebook
Jeepaholics Anonymous Forum
Embarke.com - We Fix Online Groups

Similar Topics

Click to view RSS...
Expand / Collapse

Reading This Topic

Expand / Collapse

Back To Top

About InstantASP



We develop market-leading ASP.NET community & customer support apps. We help businesses of all sizes build engaging online communities and deliver exceptional customer support. Our community app, InstantForum allows you to quickly add rich social features & branded discussions to your existing web site. Our self-service support portal InstantKB is designed to help reduce inbound customer support by allowing you to quickly & easily publish articles, FAQs & documentation to help your customers. Our forthcoming Influx product currently in beta allows businesses to manage, prioritize & respond to inbound customer support enquires received via email, phone or the web.

Start your free 30 day free trial
InstantASP Logo
© 1999-2013 InstantASP Ltd. All rights reserved.
Can we help?

+44 ( 0 ) 1565 832 827


Mon-Fri 9am-6pm GMT

Connect with us...
  • Twitter
  • Facebook
  • Google+
  • RSS