4 ms·

Set a limit, you get one password reset email per day/successful password reset. If you try to do it again you are instructed to look for the email that had alr

• WarOnPrivacy 3y ago
  > Set a limit, you get one password reset email per day/successful password reset. I routinely see password reset emails get caught by greylisting. Most are released by the 2nd email but sometimes it takes more.
  • willcipriano 3y ago
    Greylisting is really a rare configuration choice in modern times and has always been a "results may vary" sort of deal. Personally I wouldn't factor those users into my considerations.
    • WarOnPrivacy 3y ago
      I do password resets for clients fairly routinely. I run into greylisting behavior about 2 doz times a year. Often happens in spurts. Just last week I ran into greylisting a bunch of times, while testing a new mail server against gmail accounts. Same thing two weeks prior for a diff server. This is with SPF, DKIM and DMARC setup. Corp and personal gmail accounts - no rhyme or reason to when it happens.
      • willcipriano 3y ago
        That might not be greylisting like I'm thinking of, Gmail has its own secret process but in my experience they accept the message and decide if they want to deliver it or not later. If you don't have a ton of users you don't have the "celebrities getting hit thousands of times with password reset requests" problem and if you do have tons of users, your higher volume of transitional emails makes Gmail trust you more so your issue is much less likely to happen.