# Hide\_email\_address\_taken needs pass reset text modification

**URL:** https://meta.discourse.org/t/hide-email-address-taken-needs-pass-reset-text-modification/213413
**Category:** Bug
**Created:** [December 30, 2021, 12:32am UTC](https://meta.discourse.org/t/hide-email-address-taken-needs-pass-reset-text-modification/213413 "2021-12-30T00:32:44Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Frully](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/frully/32/235059_2.png) [@Frully](https://meta.discourse.org/u/Frully)
#### Post date: [December 30, 2021, 12:32am UTC](https://meta.discourse.org/t/hide-email-address-taken-needs-pass-reset-text-modification/213413/1 "2021-12-30T00:32:44Z")

</div>

2.8.0 beta10 - hide\_email\_address\_taken needs (automatic) tweaks to the site settings, or a warning to edit them to make sense.

If using the new feature [2.8.0.beta10: API Improvements, Domain Restricted Invite Links, Tab to Indent, and more](https://meta.discourse.org/t/2-8-0-beta10-api-improvements-domain-restricted-invite-links-tab-to-indent-and-more/212780#hide_email_address_taken-site-setting-improvement-6)

![image](https://global.discourse-cdn.com/meta/original/3X/e/1/e1cad37fb9fb668c45aa6deb700ef05218eba141.png)

Enabling the setting changes the outcome text from a password reset of “an account matching xyz/foo@bar.com was found, and an email was sent” to “if an account matching xyz/foo@bar.com exists it will get an email with reset instructions”. good. Problem: It doesn’t change the password reset instructions regarding ‘enter the username or password to initiate a reset’.

When doing a password reset from the login popup, the new site setting requires an email address and not a username, but the instructions seem to allow both, and outcome make it seem like it worked:

 ![image](https://global.discourse-cdn.com/meta/original/3X/e/6/e6d06b12086bc919f58602691eee421a8a566c12.png)

No email is sent if a username is entered instead of an email, but the outcome text indicates that it should have worked.

Instructions don’t change regardless of the site setting:

 ![image](https://global.discourse-cdn.com/meta/original/3X/9/8/985fde2f11137dbde6b4547c2ae7d48e9d191b5b.png)

I foresee lots of head-desk when people are sure they have the right username and never get password reset emails.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [December 30, 2021, 12:54am UTC](https://meta.discourse.org/t/hide-email-address-taken-needs-pass-reset-text-modification/213413/3 "2021-12-30T00:54:39Z")

</div>

I am having trouble reproducing this on latest:

 ![image](https://global.discourse-cdn.com/meta/original/3X/5/8/58e70592ccd6dd06b3cea00c89b79fd5fc020eba.png)

 ![image](https://global.discourse-cdn.com/meta/original/3X/3/d/3dab261a7aaa0e9c334d26537f8cfebf2b1a843a.png)

Can anyone else reproduce the issue?

---

<div class="post-metadata">

### Author: ![Frully](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/frully/32/235059_2.png) [@Frully](https://meta.discourse.org/u/Frully)
#### Post date: [December 30, 2021, 1:31am UTC](https://meta.discourse.org/t/hide-email-address-taken-needs-pass-reset-text-modification/213413/4 "2021-12-30T01:31:04Z")

</div>

![Screenshot_20211229-182545](https://global.discourse-cdn.com/meta/original/3X/4/6/46bfc91fb57090c039c1f36bdd12bf4f7f838a2d.jpeg)

I suspect it may have been a cached page issue. I was testing in an incognito tab and refreshing between setting changes. The localization text seems right and in mobile I get the correct behaviour. Will try again when I’m near a computer. Apologies if this was a red herring.

Edit: trying again from a new computer with no cache…it is correct. moral of the story…be more thorough I guess. Thanks for looking into it friends!

---

<div class="post-metadata">

### Author: ![rorycb](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rorycb/32/423647_2.png) [@rorycb](https://meta.discourse.org/u/rorycb)
#### Post date: [December 30, 2021, 1:39am UTC](https://meta.discourse.org/t/hide-email-address-taken-needs-pass-reset-text-modification/213413/5 "2021-12-30T01:39:36Z")

</div>

I can’t reproduce it on my test instance running latest either.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [December 30, 2021, 3:31am UTC](https://meta.discourse.org/t/hide-email-address-taken-needs-pass-reset-text-modification/213413/6 "2021-12-30T03:31:11Z")

</div>