Ask security question when resetting forgotten password s
When we go to "Forgot Password", after we type in the verification code, have us reset the password rather than just signing us in. Also ask us our security question before doing this. What if my recovery email had been hacked or my phone number had changed? All other sites I've been on do this. It is SO 1995 of you not to have this necessary security blanket. You need to do this to completely verify its the actual user. What's the point of a security question then.
122nd
ranked
Gabrielle Jordan
shared this idea