# Email enumeration vulnerability on "Password Reset" dialogue

**URL:** <https://meta.discourse.org/t/email-enumeration-vulnerability-on-password-reset-dialogue/273449>\
**Category:** UX\
**Created:** [August 1, 2023, 7:37am UTC](https://meta.discourse.org/t/email-enumeration-vulnerability-on-password-reset-dialogue/273449 "2023-08-01T07:37:41Z")\
**Posts on this page:** 1\
**Showing post:** 9

<div class="post-metadata">

**Author:** ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)\
**Post date:** [August 1, 2023, 8:45am UTC](https://meta.discourse.org/t/email-enumeration-vulnerability-on-password-reset-dialogue/273449/9 "2023-08-01T08:45:43Z")

</div>

I think, currently, everything is working as expected so we can’t truly class this as a #Contribute > Bug. However, we do routinely re-evaluate our defaults and you’ve made some interesting points that are worth considering.

I’ll slide this over to #Contribute > UX so the conversation can continue there. 👍

---

_[View the full topic](https://meta.discourse.org/t/email-enumeration-vulnerability-on-password-reset-dialogue/273449)._