2 ms·
I can't think of anything in particular you'd need to worry about. Something long enough that it would be infeasible to try and attack. We just use GUIDs, but t
by drivebyacct2 15y ago
I can't think of anything in particular you'd need to worry about. Something long enough that it would be infeasible to try and attack. We just use GUIDs, but those may be predictable if you know the generation time (I'm not sure about that, to be honest).
- dav-id 15y agoI do exactly the same thing. The guid is set to expire after a period of time and requires that registered email and the key together. It won't allow login, only changing of their password.