Password Reset

[davismtl]

This card is to explore options about resolving some of the bad UX around password resets.

This can include:

• Improved registration flow
• Magic links or device pairing (to avoid entering password)
• Better UX by telling user to change password on other device instead of doing a reset if there is a risk of lost data.
• Seeing if we can use the new password recovery technology of Github and FB

Here is a document that was used to brainstorm solutions:
https://docs.google.com/a/mozilla.com/document/d/1EjmJN5-9zjnX_-hgtN9hdNgQMSt7bPdG5u27UhENco4/edit?usp=gmail&ts=584b1763

[davismtl]

I will close this because:

• we have improved the registration flow to avoid typo'd passwords
• we are working on device pairing
• we are working on account recovery with a key

We will not use FB delegated recovery at this time since we believe there is an optics problems with setting up recovery with FB despite it being secure. Users don't trust FB.