Skip to main content

All Questions

Filter by
Sorted by
Tagged with
2 votes
3 answers
1k views

Password reset vs change

My webapp has "password reset" and "password change" functionality. Password "reset" is typical: user clicks "I forgot my password", enters his email, one-time link emailed there, he visits a form to ...
lonix's user avatar
  • 455
16 votes
4 answers
7k views

Why are one time password reset links safer than one time passwords?

Recently I applied for a job at a company creating security-critical solutions for military, aerospace, ... After registering at their webpage, I received an email with my username and a ...
Martin Drozdik's user avatar