4 ms·
I think the solution is pretty simple... just be transparent and say for security reasons you can't reveal whether or not the user exists.
by jeff18 16y ago
I think the solution is pretty simple... just be transparent and say for security reasons you can't reveal whether or not the user exists.
- ruchi 16y agoYes, just saying this should be sufficient - "If your email address is our database, you would shortly receive an email to reset your password".