3 ms·
If they don't get a verification / instructions email, they'll know an account with the username they typed, existed?
by cutemonster 7y ago
If they don't get a verification / instructions email, they'll know an account with the username they typed, existed?
- lytefm 7y agoYou shouldn't use usernames in that scenario, just emails. After Signup, you just show a general message that a confirmation Email has been sent. If the account already exists, some policy to notify the account owner can be put in place.
- ecnahc515 6y agoIn this case, where you're probing for user names or emails, you don't own the email, so you wouldn't receive the verification yourself, and thus wouldn't know if the account exists. This is exactly why most password reset emails say "if you didn't request this, please let us know, as someone may be attempting to access your account".