8
votes
4answers
186 views

How long should a confirmation link be valid?

How much time should we give a newly registered user to click the confirmation link sent by email? I can't find any best practise on how long a confirmation link should be valid. Thanks for sharing ...
4
votes
6answers
986 views

Is a captcha necessary when email validation is being utilised?

During registration for my new website, I'm going to require that a link is clicked in a confirmation email before a new user has full privileges. Is this a good way to remove spammers/bots, or do you ...
8
votes
6answers
1k views

How to handle “forgot password” when user has not confirmed email?

If you follow the pattern of allowing users access to your application without having confirmed an email (generally considered good UX), how do handle the case where they forgot their password? Very ...