3 ms·
> 11. The “reset password” screen should remember which email you already entered I really wish this one would catch on, it's such an obvious and easy feature
by conductr 5y ago
> 11. The “reset password” screen should remember which email you already entered
I really wish this one would catch on, it's such an obvious and easy feature
- cratermoon 5y agoExcept for a couple of things. One it assumes that the email used for login and the actual user's email are identical, which isn't always true, and two, if a user mistypes their email and doesn't realize it, then hitting "reset password" will send email to the wrong address.
- conductr 5y agoWhile that's true. If the email is wrong, password reset isn't going to work for them anyways right? So may as well fix it for the majority of users who do know their email and typed it correctly but forgot their password. Usually even a "sorry that email address is not found" message is frowned upon in terms of security. Also if you're app is sending reset passwords emails to emails that don't exist, that's a bigger issue.