3 ms·

So, no changing of email without changing the password then?

• jmaygarden 14y ago
  No, just require that the password is entered to change the user's email address. Then a new hash can be generated and stored.