Episode #125 of the Stack Overflow podcast is here. We talk Tilde Club and mechanical keyboards. Listen now

New answers tagged

0

Leaving this, rather worrying, fact aside for the moment: it always comes with the same token for that particular account then an eight-character, alphanumeric, randomly generated reset token shouldn't be a vulnerability if properly handled by the server. A password reset token should essentially be a one-time-use object: you ask to reset the password, ...


Top 50 recent answers are included