Position: Below the 'Sign In' button on the sign-in page.
Text: "Forgot your password?"
Describe the solution you'd like
Password Recovery Flow:
Clicking on the link will redirect users to a password recovery page or open a modal.
The user will be prompted to enter their registered email address.
An email will be sent to the user containing a unique, time-sensitive password reset link.
The reset link will direct users to a secure page where they can set a new password.
Security Considerations:
Ensure that the password reset link expires after a certain period (e.g., 30 minutes).
Limit the number of reset attempts to avoid abuse.
Use CAPTCHA to prevent automated bots from triggering password reset requests.
The new password should meet the system's security requirements (e.g., minimum length, complexity).
Notifications:
Notify users via email when a password reset request is made, even if they did not request it.
Send confirmation once the password has been successfully updated.
Describe the feature you'd like to request
Add 'Forgot Password' Link:
Position: Below the 'Sign In' button on the sign-in page. Text: "Forgot your password?"
Describe the solution you'd like
Password Recovery Flow:
Clicking on the link will redirect users to a password recovery page or open a modal. The user will be prompted to enter their registered email address. An email will be sent to the user containing a unique, time-sensitive password reset link. The reset link will direct users to a secure page where they can set a new password. Security Considerations:
Ensure that the password reset link expires after a certain period (e.g., 30 minutes). Limit the number of reset attempts to avoid abuse. Use CAPTCHA to prevent automated bots from triggering password reset requests. The new password should meet the system's security requirements (e.g., minimum length, complexity). Notifications:
Notify users via email when a password reset request is made, even if they did not request it. Send confirmation once the password has been successfully updated.
Describe alternatives you've considered
No response
Additional context
Gmail verification includes