Hi, two of our users received the “You have submitted a password change request!” email which they never ask for a password reset. I don’t understand how that can happen? Any idea why and how to avoid that? Thanks,

Anybody can enter any email into the password forgotten field on the login page, or invoke the API endpoint at Authentication API Explorer - not really a way to verify whether one is actually the email address owner before he’s actually authenticated. Don’t see a way to avoid it, unless you hide aw…

Unknown Password Reset Notification email?

Get Help

Topic		Replies	Views
Notify user that email used to reset password does not exist in our system? Get Help	2	1517	November 7, 2022
Email not found message during password reset process Get Help password-reset , email-verification	2	4238	July 25, 2019
Changing email via the API returns 'The specified new email already exists' when it doesn't Get Help	4	3709	March 27, 2020
Can't reset password Get Help	2	1505	February 2, 2023
Best practice to deal with password reset on social users Get Help login-experience , reset-password-prompt-new-experience	1	1081	March 2, 2023

Unknown Password Reset Notification email?

Related topics