Overview
This article explains whether it is possible to set up email validation on the password reset page before sending the password reset link.
- When an email address is entered on the password reset page, the same confirmation message appears whether the email address is valid or invalid.
- This may cause confusion if the email address does not exist in the system, as the user might expect an email that will never arrive. The message displayed is:
Please check the email address <email_address> for instructions to reset your password.
Applies To
- New Universal Login
- User Management
- Password Reset Page
Solution
It is currently not supported, nor is it recommended to check whether the email exists on the Password Reset page. This prevents the discovery of valid accounts from malicious actors.
- One possible workaround is to customize the text on that particular screen to something similar to the following message using Custom Universal Login Text Elements:
If the provided email address is associated with a valid account, the password reset instructions will be emailed soon.