All Questions
2 questions
2
votes
3
answers
1k
views
Password reset vs change
My webapp has "password reset" and "password change" functionality.
Password "reset" is typical: user clicks "I forgot my password", enters his email, one-time link emailed there, he visits a form to ...
16
votes
4
answers
7k
views
Why are one time password reset links safer than one time passwords?
Recently I applied for a job at a company creating
security-critical solutions for military, aerospace, ...
After registering at their webpage, I received an email with my username and a ...