# Different password reset for wrong username/email

**URL:** <https://meta.discourse.org/t/different-password-reset-for-wrong-username-email/15909>\
**Category:** Feature\
**Created:** [23. Mai 2014 um 14:16 UTC](https://meta.discourse.org/t/different-password-reset-for-wrong-username-email/15909 "2014-05-23T14:16:30Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)\
**Post date:** [23. Mai 2014 um 22:03 UTC](https://meta.discourse.org/t/different-password-reset-for-wrong-username-email/15909/2 "2014-05-23T22:03:52Z")

</div>

That’s not the exact text though, what we say is:

> If an account **matches the username xaswae** , you should receive an email with instructions on how to reset your password shortly.

and

> If an account **matches [name@example.com](mailto:name@example.com)**, you should receive an email with instructions on how to reset your password shortly.

This seems reasonably clear to me, the only alternative is to allow a bit of a security hole where you can type emails and usernames to see which exist.

---

_[View the full topic](https://meta.discourse.org/t/different-password-reset-for-wrong-username-email/15909)._