News for hackers. Stuff that matters.

A comment on Ask HN: Strategy for password reset email vs URL to reset pwd. Parent comment

Re:Ask HN: Strategy for password reset email vs URL to reset... by dav-id on Monday July 18, 2011 @03:25AM (#2775426)
I do exactly the same thing.

The guid is set to expire after a period of time and requires that registered email and the key together. It won't allow login, only changing of their password.

[ Parent | on HN ]

There are no comments on this comment yet.