Most secure way to reset a password via email link [message #185156] |
Wed, 05 March 2014 13:02 |
jvd_200089
Messages: 3 Registered: March 2014
Karma:
|
Junior Member |
|
|
When resetting a password:
1) Emailing a new password that the user then logs in with and resets is the most simple method for non hashed passwords.
2) The other way involves sending a link for them to click on that redirects them to the password reset page but unless their email is secure anyone could click that link. What is special about this 2nd way? because thats what how my boss wants it to work because there is not point doing it that way if it isn't more secure than sending them a temporary new password.
Also any source code examples for option 2 would be appreciated.
|
|
|