We using Lock with native to login/signUp in email. But when click on Don’t remember password and send reset link no email validation is the user is Signed up or not. for any email getting a success response. Is there any way to prevent unregistered users?

Validate if email address exists in Lock’s forgot password screen

john.gateley August 7, 2020, 1:25pm 2

This is by design. If you enter a valid email, the password reset link is sent. If you enter an invalid email, nothing is sent.

This avoids information leakage (which emails are valid).

John

Topic		Replies	Views
Validate if email address exists in Lock's forgot password screen Get Help lock , reset-password	3	7007	March 2, 2018
Password reset e-mail being sent to non-valid users Get Help lock , auth0 , password-reset , forgot-password	4	5115	August 26, 2019
Auth0 forgot password email check Get Help	2	2351	December 16, 2021
Check Whether Email Address is Valid Prior to Sending Password Reset Link Knowledge Articles	1	24	April 24, 2025
Reset password success message Get Help password-reset , password , email , password-email , email-verification	3	4306	March 2, 2018