Make the "Forgot your password" link always available at login
I love the password reset link, but as far as I can tell it only appears AFTER a failed login attempt -- and then ONLY if the user has supplied a recovery email address. I've even taken to adding the [PasswordRecovery] section with RecoveryEmail=username@domain.com to quite a number of our user's User.ini file just to reduce their need to call the email administrator (me).
Can you make the "Forgot your password" link be present always in the WorldClient login page?
If that's a security concern perhaps turn webmail login into a two-step process where they input email address, click Next, then input a password or the option to click "Forgot your password". That way it's not on the main login page.
Alternatively, the reset link could be there always but respond generically with "If that email account exists, a password reset link has been sent to that address."
Martin Wyatt
shared this idea
Hello Martin,
Thank you for sharing your idea with us to include the forgot password field on the login page even before the login attempt has failed. This is already done in the Mobile theme. Unfortunately, it is not possible for us to do this in the WorldClient, Lookout, or Lite themes.