3 ms·
As long as there's a reasonable way to unlock a user. For a free consumer site, it can't require human interaction. "Email me a new password" seems reasonable
by ShabbyDoo 17y ago
As long as there's a reasonable way to unlock a user. For a free consumer site, it can't require human interaction. "Email me a new password" seems reasonable for most cases.
- sorbits 17y agoI have a common four character name as login with Apple’s developer connection. I regularly get locked out (and have to request a new password) presumably because other users try to login to my account (not remembering their real login). This scheme sucks! Perhaps a better scheme would be to ban the IP for 10 minutes after half a dozen failed logins.