Forgot Password: what is the best method of implementing a forgot password function?

by
  1. I personally would send an email with a link to a short term page that lets them set a new password. Make the page name some kind of UID.
  2. If that does not appeal to you, then sending them a new password and forcing them to change it on first access would do as well.

Option 1 is far easier.

More Related Contents:

  1. Best way for a ‘forgot password’ implementation? [closed]
  2. Create Account, Forgot Password and Change Password
  3. Reference – Password Validation
  4. Google OAuth 2 authorization – Error: redirect_uri_mismatch
  5. Authentication filter and servlet for login
  6. How to secure MongoDB with username and password
  7. Error when connect to impala with JDBC under kerberos authrication
  8. Salt and hash a password in Python
  9. How can I extend ServiceStack Authentication
  10. Socket.IO Authentication
  11. user authentication libraries for node.js?
  12. Authentication with 2 different tables
  13. How to use UrlFetchApp with credentials? Google Scripts
  14. how to implement login auth in node.js
  15. What if JWT is stolen?
  16. How to get a JWT?
  17. CSRF Token necessary when using Stateless(= Sessionless) Authentication?
  18. How do I login and authenticate to Postgresql after a fresh install?
  19. IIS7: Setup Integrated Windows Authentication like in IIS6
  20. How to login and authenticate to Postgresql after a fresh install?
  21. How to use Windows Active Directory Authentication and Identity Based Claims?
  22. In Subversion can I be a user other than my login name?
  23. Where can I find a list of OpenID Provider URLs? [closed]
  24. How to use Github Personal Access Token in Jenkins
  25. ASP.NET MVC 3 using Authentication
  26. Customize Authentication – Login Symfony2 Messages
  27. How to use Client Certificate Authentication in iOS App
  28. Trouble getting ClaimsPrincipal populated when using EasyAuth to authenticate against AAD on Azure App Service in a Asp.Net Core web app
  29. How does OpenID authentication work?
  30. Web API 2, OWIN Authentication, SignOut doesn’t logout

Leave a Comment