Discourse Meta
Password reset confirm message should discourage social engineering
Contribute
Feature
JammyDodger
Closed
August 4, 2023, 8:03am
11
Closed in favour of
Email enumeration vulnerability on "Password Reset" dialogue
show post in topic
Related topics
Topic
Replies
Views
Activity
Different password reset for wrong username/email
Feature
64
28310
October 4, 2017
Email enumeration vulnerability on "Password Reset" dialogue
UX
19
4450
December 19, 2024
Hiding "e-mail taken" on sign-up by default
Announcements
6
289
December 22, 2024
Always allow username-based password reset
Feature
login
4
150
August 6, 2026
Do not leak emails on password reset
Support
3
695
January 14, 2021