When new password was inserted there was no advice/reminder on strength/number of character etc. regarding password requirement.
Maybe add reveal password eye.
Email with instructions on reset of password received and password was reset with access to account granted. However, there was no request for 2FA authentication before access was given. Once new password was confirmed access of account was immediately provided. To increase security there is maybe a need for 2FA here as well.
topd333
commented
6 years ago
Reset of password procedure.
When new password was inserted there was no advice/reminder on strength/number of character etc. regarding password requirement.
Maybe add reveal password eye.
Email with instructions on reset of password received and password was reset with access to account granted. However, there was no request for 2FA authentication before access was given. Once new password was confirmed access of account was immediately provided. To increase security there is maybe a need for 2FA here as well.