Hi is there a possibility to show an error message when a user enters an email that doesnt exist when trying to reset their password. Right now Auth0 shows a message that the email was sent successfully which is misleading to the user.

I don’t think this can be changed, but someone with more experience may correct me! No error is shown because throwing an error saying the email doesn’t exist leaks information … I can use that to find out your user’s email addresses.

Reset Password - email message states successfully send to email that doesn't exist

Get Help

system Closed December 2, 2018, 1:35pm 6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Misleading "email sent" message when recovering password for non-existing account Get Help password-reset	18	7769	March 2, 2018
Notify user that email used to reset password does not exist in our system? Get Help	2	1517	November 7, 2022
Password reset exposes account exists Get Help password-reset	3	3625	July 25, 2019
Reset password - Send email when account does not exist Product Feedback	1	1517	October 5, 2023
Reset password success message Get Help password-reset , password , email , password-email , email-verification	3	4306	March 2, 2018

Reset Password - email message states successfully send to email that doesn't exist

Related topics