Questions tagged [password-recovery]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
1 answer
92 views

Should OTP session be suspended if users navigate to another page?

During the password recovery process, once the OTP is sent to a user, why isn't the session suspended if the user navigates to another page in the meantime? For example, if you try the Forgotten ...
Md. Rayhan's user avatar
0 votes
2 answers
146 views

Why should "forgot password" page open in the same tab?

I am tasked with making the login functionality for a website. Only working on the UI for now. The "forgot password" page asks for the user's email address, sends it to the backend, which ...
Aditya Patil's user avatar
0 votes
1 answer
1k views

What should happen if a social login user tries to reset their password?

On my webapp, I have normal users who signup with email/password combination I also offer signup via Facebook, Google, Twitter... Let's say you are a social login user who logged in via Facebook on my ...
PirateApp's user avatar
  • 995
1 vote
2 answers
216 views

How to handle forgotten PIN for kids' banking app

How should a kids' banking app handle kids forgetting their PIN? This app is just for teaching purposes. No email or account number confirmation flow would work. I'm not allowed to share too much ...
Deep Shah's user avatar
  • 173
3 votes
1 answer
446 views

On password recovery, what to do if device is already logged in?

Say a user requests a password recovery on a computer. Our system then sends an email with a unique link to recover the account. However now consider the user receives this email and opens it on his ...
paul23's user avatar
  • 217
1 vote
1 answer
974 views

Forgot Password typical use case

This is "inspired" (a crosspost?) by this question I asked on StackOverflow Meta: to my surprise it has been highly downvoted, so I'm asking here to you experts, if my "feel" is sharable or not. ...
creative's user avatar
2 votes
3 answers
3k views

How to prompt existing customers to change their passwords

I'm looking for some UX examples of how other companies have handled this situation: Scenario: Devs are using an old password encrypting method (sha1) I believe and need to change it to a more secure ...
MushyMarshmello's user avatar
1 vote
1 answer
276 views

Password Recovery in Modal or New Page [closed]

What are the advantages/disadvantages of using a popup password recovery vs a new page?
Alex Leuo's user avatar
  • 129
3 votes
1 answer
206 views

Merging change password and forgotten password process?

Both of these processes basically do the same thing - they change password. Password change usually by entering old and a new password, forgotten password by typing your mail address to which user ...
fxck's user avatar
  • 232
1 vote
1 answer
200 views

Is there any advantage to bringing the user in-app for reset password vs in a browser?

Is there any notable difference between bringing the user to a browser to 'reset password' vs bringing them back to the app to do the reset? Considering that this platform exists as an app and as a ...
catandmouse's user avatar
  • 4,278
1 vote
1 answer
685 views

When user check the "Keep me signed in" on login page of the website, Should we also mention the duration?

Should we do this? or this is enough
Jitendra Vyas's user avatar
1 vote
1 answer
118 views

How to tell the user what their options are when they forget their password and there is not the option to reset it through the web or email?

There is a system where users can set a web password through the application they have on their cellphones. So if they forget the password they can easily reset it through the app with no problem. ...
Sarah Akhavan's user avatar
2 votes
1 answer
207 views

How should users be directed if they ask for a password reset, but their email is no longer valid?

I manage a website where users can request a password reset via an automated email. What experience should I provide to users who have requested a password reset, but whose registered email address ...
Mike Zavarello's user avatar
4 votes
3 answers
354 views

What's the reason behind not notifying users that they entered a wrong email when they recover their password?

Sorry, I was not able to formulate the title shorter. Today I stumbled across the password recovery from Dropbox. Here, users have to enter their email address and Dropbox says: If a Dropbox ...
Nils Q.'s user avatar
  • 43
2 votes
3 answers
1k views

Password Recovery/Recovery Question Process Flow

I am creating an application where the user will be able to recover their password from a "forgot password?" link. Once the user clicks on the link they are presented with their recovery questions ...
Nick_M's user avatar
  • 946