# Hide\_email\_address\_taken דורש שינוי טקסט לאיפוס סיסמה

**URL:** <https://meta.discourse.org/t/hide-email-address-taken-needs-pass-reset-text-modification/213413>\
**Category:** Bug\
**Created:** [30 בדצמבר,‏ 2021,‏ 12:32am UTC](https://meta.discourse.org/t/hide-email-address-taken-needs-pass-reset-text-modification/213413 "2021-12-30T00:32:44Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![Frully](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/frully/32/235059_2.png) [@Frully](https://meta.discourse.org/u/Frully)\
**Post date:** [30 בדצמבר,‏ 2021,‏ 12:32am UTC](https://meta.discourse.org/t/hide-email-address-taken-needs-pass-reset-text-modification/213413/1 "2021-12-30T00:32:44Z")

</div>

2.8.0 beta10 - hide\_email\_address\_taken needs (automatic) tweaks to the site settings, or a warning to edit them to make sense.

If using the new feature [2.8.0.beta10: API Improvements, Domain Restricted Invite Links, Tab to Indent, and more](https://meta.discourse.org/t/2-8-0-beta10-api-improvements-domain-restricted-invite-links-tab-to-indent-and-more/212780#hide_email_address_taken-site-setting-improvement-6)

![image](https://global.discourse-cdn.com/meta/original/3X/e/1/e1cad37fb9fb668c45aa6deb700ef05218eba141.png)

Enabling the setting changes the outcome text from a password reset of “an account matching xyz/foo@bar.com was found, and an email was sent” to “if an account matching xyz/foo@bar.com exists it will get an email with reset instructions”. good. Problem: It doesn’t change the password reset instructions regarding ‘enter the username or password to initiate a reset’.

When doing a password reset from the login popup, the new site setting requires an email address and not a username, but the instructions seem to allow both, and outcome make it seem like it worked:

 ![image](https://global.discourse-cdn.com/meta/original/3X/e/6/e6d06b12086bc919f58602691eee421a8a566c12.png)

No email is sent if a username is entered instead of an email, but the outcome text indicates that it should have worked.

Instructions don’t change regardless of the site setting:

 ![image](https://global.discourse-cdn.com/meta/original/3X/9/8/985fde2f11137dbde6b4547c2ae7d48e9d191b5b.png)

I foresee lots of head-desk when people are sure they have the right username and never get password reset emails.

---

_[View the full topic](https://meta.discourse.org/t/hide-email-address-taken-needs-pass-reset-text-modification/213413)._