Forgot_password abuse

Let’s make sure the site is updated, latest should reduce the volume, we will soon add up address to the email so site admins can easily block abusers

5 Likes

Please do. I have situation where most users get reset links several times a week.

1 Like

A potential solution if a community is likely to get abuse and users are likely to know what their email address is, would be to require an email address rather than username to request a password reset.

2 Likes

hmmm @puchal did you enable hide email address taken site setting? It will require a full email for a forgot password email to be issued.

3 Likes