Change password after clicking on reset link in email

[Danielx64]

Hello all,

I was just thinking, there are online services where when you go to reset your password and you click on the email in the email to reset it you get taken to a page where you can type in your new password.

Currently
User forget password -> request new password->clicks on link in email->login with new generated password.

New way:
User forget password -> request new password->clicks on link in email-> Get taken to a page where he can type in a new password -> login with new password.

I think that this is a better way than what https://area51.phpbb.com/phpBB/viewtopi ... 13&t=44919 was trying to do.

[EXreaction]

Yes, this would be very preferable IMO.

[Master_Cylinder]

+1 that works...

[Alien_Time]

+++++1. That's much better.

[Mess]

+1

[Alien_Time]

Also if this can be implemented, it will be helpful if the failed login attempt count is reset to 0 again after completing the above steps. Most of these users who request for a new password would have exceeded the login attempts. So if a new password is activated using the above method, resetting the login attempt back to 0 will be useful so they are not required to answer the security question once again when they have just completed the process of setting up a new password on the account.

[EXreaction]

That as well could be done, but really, they should just be logged in right away when resetting their password.

[Alien_Time]

but really, they should just be logged in right away when resetting their password.

That will be perfect!

[Danielx64]

Have anyone been to a site there you answer a question when you change your password? (to prevent bots from doing it)

[Danielx64]

Wait I think outlook.Com does that - on the first page where you put your email address in