When Reseting Passwords add a Security Question(s)

Hello,

I suggest that we add a security question(s) in case you forgot your password. You can add up to three questions and have to get 2 out of the three to be able to reset your password. When we click on Forgot password we have to enter are email but that is too easy for someone who knows are password to the email. It would be nice to add a security question because the person may not know your answer and would help prevent people who shouldn't have access to that account. When you answer all three questions wrong the account is locked out for 90 minutes (which could be changed by Forumotion) and an email is sent to the person say are you the one trying to reset your password? If so your account has been locked. This would also include an IP of the person who is trying to reset the password. If you aren't trying to reset the password please view this to help prevent someone gaining access to the account.

If you still have problems with not remembering your questions or password you can still come to the support forums and ask for a password reset.

Thank you for reading my suggestion and remember to vote.

Vote yes! More security = Better always!

Reverse Simplicity wrote:Vote yes! More security = Better always!

Darren1 wrote:

Reverse Simplicity wrote:Vote yes! More security = Better always!

voted YES cause more security is better BUT i know *I* for one always forget my answers to those questions after awhile so a bunch of people, if they're anything like me, could get locked out of their accounts.

The account would only be locked for 90 minutes thus you can also come here to reset your password.

fan4me wrote:voted YES cause more security is better BUT i know *I* for one always forget my answers to those questions after awhile so a bunch of people, if they're anything like me, could get locked out of their accounts.

Isn't it the idea of these things is to be a question with an answer that never changes. 'birthplace' 'mothers maiden name' etc

By explaining 90 minutes is too overwhelming, someone can blow off their head with that time limit, otherwise let the administrator choose how many minutes until the account stopped being in lockdown, and default 90.

I'll say "yes" if you include the information above.

A definite yes from me.

Reverse Simplicity wrote:

fan4me wrote:voted YES cause more security is better BUT i know *I* for one always forget my answers to those questions after awhile so a bunch of people, if they're anything like me, could get locked out of their accounts.

Isn't it the idea of these things is to be a question with an answer that never changes. 'birthplace' 'mothers maiden name' etc

well sometimes its like "Where was your mother born?" and I have no idea so i always have to ask her.

yes i think i would be implemented because this feature provide more security to our forum & i had this suggestion in my mind since last week & now it,s already been posted so i just say that it is more secure by adding this option .......

Wellbe6 wrote:

Darren1 wrote:

Reverse Simplicity wrote:Vote yes! More security = Better always!

That kinda says everything.

@ Mod 4 U

I dont wanna blow up my head.. Admin should be able to remove, and edit the limit. Agree with you.

---

To make this even more safe, what about the Admin making you able to have more questions, with 3 at the minimum?


All in all, this is a great suggestion

--> Voted yes

The 90 minutes is only an explain do you really think by saying 90 minutes will be implied.

I guess the person who voted no wants his forum to be lost by someone else.

Thanks for the support

I voted yes a while ago but forgot to mention it...

I give a big thumbs up for this. This is a very good idea. Not only does it provide more security, but it kind of gives us a relief that our password is more safe & secure.

I'm really not sure why this isn't even made. I mean Gmail, Yahoo, YouTube etc... all have this feature.

Mod 4 U, if you enter your password in wrong after a few attempts, it's locked for the following 90 minutes, as it presently is.
There would be no time change


P.S. 90 mins = 1.5 hrs Not THAT long..

Voting yes.

Another of those (sometimes) extremely useful suggestions

Dumbledore27 wrote:Voting yes.

Another of those (sometimes) extremely useful suggestions

My vote is Yes

Saxaca wrote:

Wellbe6 wrote:

Darren1 wrote:

Reverse Simplicity wrote:Vote yes! More security = Better always!

That kinda says everything.

@ Mod 4 U

I dont wanna blow up my head.. Admin should be able to remove, and edit the limit. Agree with you.

---

To make this even more safe, what about the Admin making you able to have more questions, with 3 at the minimum?


All in all, this is a great suggestion

--> Voted yes

nathanpc wrote:

Saxaca wrote:

Wellbe6 wrote:

Darren1 wrote:

Reverse Simplicity wrote:Vote yes! More security = Better always!

Wow! I made a good post

To add to content the questions should be plentiful, but have only one possible answer (No 'your favorite' junk).
Things like: parents maiden names, first car, first highschool, town born in: are all good ones.

With needing to ask your mother for he birthplace, well at least it means your account is secure. Not even you retain the information required. Like having 2 keys that must be turned at the same time

I would love to see this implemented. As the OP said, this is a default feature on many, if not all, of the most visited websites.

Definitely yes! It's always better to have more security. :3

Yep, good suggestion, but I would modify one little thing...

When you answer all three questions wrong the account is locked out for 90 minutes and an email is sent to the person say are you the one trying to reset your password?

In that email, the IP of the person that answered wrong to the questions should be reported to the owner, so the real owner could investigate who is the person who tried access illegally to the account.

As I said before, positive vote from me, but adding that little thing

Anyone else like to voice their option?

I like the idea, but what if the person forgets the answers to these security questions? Also, it'd be nice to log to IP of the person trying to reset your password. I've voted yes,

Good idea, it'll give us more security

If we can forget our password how can we remember our question and answer.
example: i forget my password and i want to reset it but i forget my answer and question what will i do?
I lost my yahoo id bcz of this system.

Master Marc wrote:I like the idea, but what if the person forgets the answers to these security questions? Also, it'd be nice to log to IP of the person trying to reset your password. I've voted yes,

بلا wrote:If we can forget our password how can we remember our question and answer.
example: i forget my password and i want to reset it but i forget my answer and question what will i do?
I lost my yahoo id bcz of this system.

Ummm come here and PM Typlo, Luky or I to reset the password. This is just to help keep you account safe. Everything else would be the same.

Voted yes, since this is so obvious. Every single website has this, and its a great added security measure.

Great suggestion MrMario

Wow this will be really helpful! Good suggestion