Page MenuHomePhabricator

E-mail new password
Closed, InvalidPublic

Description

Author: alberto

Description:
Hi, someone frequently requests a new password with my username, may you ask for
the e-mail address to confirm the request before generate a new password? The
function will be more secure and 'someone' can't mistake!

Thanks for your attention and good work to you

Alberto

P.S. I apologize for my 'english', I hope you'll understand the problem!


Version: unspecified
Severity: normal
URL: http://it.wikipedia.org/w/index.php?title=Speciale:Userlogin&returnto=Pagina_principale

Details

Reference
bz6003

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 9:15 PM
bzimport set Reference to bz6003.
bzimport added a subscriber: Unknown Object (MLST).

robchur wrote:

If the concern is that the password is being lost, don't panic. Your current
password continues to work unless you sign in with the new one.

There's support in the code for a throttle on the action, although whether or
not it's able to be enabled live is another matter.