Am writing a software to help my uncle with invoice creation. It has a login interface and each of his employees is supposed to have a cashier id. I was thinking how the best mechanism the cashier password reset should be reset. Should i make them answer a question or let a sole admin be responsible for that?
Here are a few methods that have been used in the past by other systems that I have worked on.
- User has to input their date of hire along with a unique password on first entry and for all future password resets.
- All employees have a default patterned password that leverages bits of information from date of hire, employee id, and initials. This will expire based on standard company security settings.
Now if you have access to a cam at the log in points then you could possibly leverage some of the different facial recognition software that is out there and have first log in success be based person logging in matching employee id photo on record. This method would be the most secure and no passwords would have to be remembered.