How do I deal with members who forget their passwords?

chinmay.sahoo

New member
In the last solution, I was happy to explain just how great human beings are in comparison to computers. Unfortunately, though, we have a tendency to “age out” important information such as the password we need to log into a site. A feature that allows users to retrieve forgotten passwords is an essential time saver. Overlook this, and you can expect to waste a lot of time changing passwords for people who have forgotten them.

If you encrypt the passwords in your database, you’ll need a mechanism that generates a new password that, preferably, is easy to remember. If you’re storing passwords as-is, without encryption, it’s probably acceptable simply to send the password to the user’s registered email address. Using an email address that you’ve already confirmed as valid is more reliable than the “Secret Question” approach. This common tactic asks users simple questions to refresh their memories, such as, “Where were you born?” and “What’s your date of birth?” Just ask yourself how many organizations, both on and offline, you’ve given that information to. Some online applications, such as forums, even make your birthday available for all to see, should you provide it. Details like this may well be common knowledge.
 
Back
Top