2 ms·
Even if they changed it so that you could select where to send the password reset, rather than having it go by default to all accounts, that still means anyone
by wycy 8y ago
Even if they changed it so that you could select where to send the password reset, rather than having it go by default to all accounts, that still means anyone with delegate access to the email address could go and request a reset on your behalf.
- Alex3917 8y ago> that still means anyone with delegate access to the email address could go and request a reset on your behalf. That's how it should work. You shouldn't have to remember which email address you signed up with in order to request a password reset. But that's fine as long as the pin number only gets sent to an account that's locked down to a degree that's appropriate relative to the assets under protection.