Password reset link

  • Resolved stobnok

    (@stobnok)


    6 years, 1 month ago

    Hello,
    Is there a way to get a password reset link to choose the new password directly on the site instead of directly receiving a new password ? Or, is there a way to get an activation link to allow the sending of the new password ? What are the advantages of directly receiving a new password ?

    Thanks

Viewing 1 replies (of 1 total)
  • Plugin Author Chad Butler

    (@cbutlerjr)

    Currently, no, that’s not an option. It is something that is planned for change in a future version, but is not currently assigned a milestone.

    Advantages/disadvantages? From a security perspective, they’re actually about the same. A lot of people argue differently that emailing a password is inherently insecure. But so also is emailing the link to reset it. They’re pretty much the same.

    If you’re concerned about security, there is the Security extension for the plugin that adds some additional features, including forcing users to change their password if they are logging in with a password that has been randomly set by the system (as it would be in the case of a reset password). The key to emailing a reset password is that the user should be changing this once they log in; the Security extension setting requires them to do this before continuing on the site.

Viewing 1 replies (of 1 total)
  • The topic ‘Password reset link’ is closed to new replies.