Discourse Meta
Password reset confirm message should discourage social engineering
Contribute
Feature
JammyDodger
Closed
August 4, 2023, 8:03am
11
Closed in favour of
Email enumeration vulnerability on "Password Reset" dialogue
show post in topic
Related topics
Topic
Replies
Views
Activity
Different password reset for wrong username/email
Feature
64
28432
October 4, 2017
Email enumeration vulnerability on "Password Reset" dialogue
UX
19
4512
December 19, 2024
Hiding "e-mail taken" on sign-up by default
Announcements
6
313
December 22, 2024
Always allow username-based password reset
Feature
login
4
201
August 6, 2026
Do not leak emails on password reset
Support
3
703
January 14, 2021