Different password reset for wrong username/email

That’s not the exact text though, what we say is:

If an account matches the username xaswae, you should receive an email with instructions on how to reset your password shortly.

and

If an account matches name@example.com, you should receive an email with instructions on how to reset your password shortly.

This seems reasonably clear to me, the only alternative is to allow a bit of a security hole where you can type emails and usernames to see which exist.

1 Like