You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The message displayed to users implies an email is sent, might be better to tell them an account already exists. Even though it's not the absolute best security practice, it would be more helpful. Also we don't want to spam users with emails so it is best to look into rate limiting on password reset requests.
If we don't change the text we could instead send out a password reset request if someone tries to register an existing email. Ensure some rate limit is set up.
The text was updated successfully, but these errors were encountered:
The message displayed to users implies an email is sent, might be better to tell them an account already exists. Even though it's not the absolute best security practice, it would be more helpful. Also we don't want to spam users with emails so it is best to look into rate limiting on password reset requests.
If we don't change the text we could instead send out a password reset request if someone tries to register an existing email. Ensure some rate limit is set up.
The text was updated successfully, but these errors were encountered: