When Reseting Passwords add a Security Question(s)

by MrMario Sat Oct 02, 2010 11:58 pm

First topic message reminder :

Hello,

I suggest that we add a security question(s) in case you forgot your password. You can add up to three questions and have to get 2 out of the three to be able to reset your password. When we click on Forgot password we have to enter are email but that is too easy for someone who knows are password to the email. It would be nice to add a security question because the person may not know your answer and would help prevent people who shouldn't have access to that account. When you answer all three questions wrong the account is locked out for 90 minutes (which could be changed by Forumotion) and an email is sent to the person say are you the one trying to reset your password? If so your account has been locked. This would also include an IP of the person who is trying to reset the password. If you aren't trying to reset the password please view this to help prevent someone gaining access to the account.

If you still have problems with not remembering your questions or password you can still come to the support forums and ask for a password reset.

Thank you for reading my suggestion and remember to vote.

by **Ape** Tue Dec 21, 2010 12:42 am

nice one gets my vote :wouhou:

by Guest Thu Feb 24, 2011 1:08 pm

Yes, good idea Mario!

by Base Thu Feb 24, 2011 6:41 pm

Excellent suggestion! Why did I not see this up until now... Very Happy

I have voted yes. It seems like a reasonable suggestion and it would definitely increase the security.

by MrMario Thu Feb 24, 2011 6:53 pm

Thanks all for your support.

by ToTheFuture Fri Mar 04, 2011 4:47 pm

2/3 questions= brilliant!
locking account if "Yes" clicked= not sure, maybe if admin can add question options onto preset?
IP showing= not good idea at all Shit

by vervada Fri Mar 04, 2011 5:44 pm

Sounds like a good idea to me.

by Adam360 Fri Mar 04, 2011 5:58 pm

My bank uses a system of ONE security question, but it has a tip that you ut before it

Example...

What is the name of your first teacher - (Unsure?)

Tip - Has the name of a famous comedian

Now you have seen the tip, it may remind you that it was Mr Bean

I think that may work better =]

by ToTheFuture Fri Mar 04, 2011 7:41 pm

Smart.

BUT-- it shouldn't be case sensitive! That happens to me all the time...

by Guest Tue Mar 15, 2011 4:57 pm

Voting yes - anything to improve security. On the assumption that the Security Question/Answer options will be things that anyone can't possibly forget about themself - such as "Mum's maiden name", "Your first school", "Your father's town of birth" etc, as already mentioned.

Cas

by MrMario Tue Mar 15, 2011 5:03 pm

ToTheFuture wrote:2/3 questions= brilliant!
locking account if "Yes" clicked= not sure, maybe if admin can add question options onto preset?
IP showing= not good idea at all

How would you like if someone comes and tries to access your account without permissions or knowledge? Would you like the option to see the IP and be able to ban this person?

My bank account does this and it works.

by Guest Tue Mar 15, 2011 5:12 pm

Yes, my bank account does this too, Mr Mario. I think its an excellent idea.

by ToTheFuture Fri Mar 18, 2011 12:14 am

Good point... I was thinking for the safety of the user resetting, but I guess that's smart. Razz

by lalalamda22 Fri Mar 18, 2011 2:25 am

I totally love this idea. Luky or Typlo need to see this topic. This would really help with security.

by Guest Thu Apr 21, 2011 6:48 am

Reverse Simplicity wrote:Vote yes! More security = Better always!

by Guest Fri Oct 28, 2011 7:25 pm

My vote is Yes Hello

by Stephen- Fri Oct 28, 2011 11:30 pm

Vote Yes ... Wink

by S(o)ciaL Fri Oct 28, 2011 11:43 pm

Vote : Yes

by Guest Mon Nov 14, 2011 8:46 pm

Amazing idea I think, my vote is Yes! Wink

by Lillia Tue Nov 15, 2011 9:25 pm

Yes! I think it's a great idea.

by musket Tue Nov 15, 2011 10:26 pm

Excellent idea voted yes Smile

by Omu Tue Jan 03, 2012 10:40 pm

Very good idea Smile

I vote yes.

by Guest Wed Jan 04, 2012 9:11 am

Sanket wrote:A definite yes from me.

Agree!

by koolkat96 Tue Feb 12, 2013 2:00 pm

This is a very nice option!

It can avoid people who try to hack user's account.
Like for example :-

Username : username123
Password : ********

And then can be the security question like :-

Security question : (ex:)What is my fave color?
Answer : *******

You never know when somebody tries to hack accounts in any forum.

by Count Dooku Sat Jan 17, 2015 3:33 pm

Hi, MrMario! Wink

I suggest that we add a security question(s) in case you forgot your password.

You can add up to three questions and have to get 2 out of the three to be able to reset your password.

When we click on Forgot password we have to enter are email but that is too easy for someone who knows are password to the email.

It would be nice to add a security question because the person may not know your answer and would help prevent people who shouldn't have access to that account.

When you answer all three questions wrong the account is locked out for 90 minutes (which could be changed by Forumotion) and an email is sent to the person say are you the one trying to reset your password? If so your account has been locked.

This would also include an IP of the person who is trying to reset the password. If you aren't trying to reset the password please view this to help prevent someone gaining access to the account.

If you still have problems with not remembering your questions or password you can still come to the support forums and ask for a password reset.

Thank you for reading my suggestion and remember to vote.

Wanting to help a fellow FM "helper", I chose to vote yes.
Your idea sounds very interesting, and who wouldn't want an extra safety?

PS: @koolkat96 ! Believe me you can, Wink

It can happen that a hacker steals your email, gets the passwords and everything related to it, including the attached "Forumtiontion" account details. (so yes, you mark a point, my dear koolkat96 once saying that the option will prevent the hack from entering the attached forums, unless of course the forum creator is so stupid to keep his passwords and other details ready for the hacker to serve himself)