When Reseting Passwords add a Security Question(s)

by MrMario October 3rd 2010, 12:58 am

First topic message reminder :

Hello,

I suggest that we add a security question(s) in case you forgot your password. You can add up to three questions and have to get 2 out of the three to be able to reset your password. When we click on Forgot password we have to enter are email but that is too easy for someone who knows are password to the email. It would be nice to add a security question because the person may not know your answer and would help prevent people who shouldn't have access to that account. When you answer all three questions wrong the account is locked out for 90 minutes (which could be changed by Forumotion) and an email is sent to the person say are you the one trying to reset your password? If so your account has been locked. This would also include an IP of the person who is trying to reset the password. If you aren't trying to reset the password please view this to help prevent someone gaining access to the account.

If you still have problems with not remembering your questions or password you can still come to the support forums and ask for a password reset.

Thank you for reading my suggestion and remember to vote.

by **Ape** December 21st 2010, 1:42 am

nice one gets my vote :wouhou:

by Guest February 24th 2011, 2:08 pm

Yes, good idea Mario!

by Base February 24th 2011, 7:41 pm

Excellent suggestion! Why did I not see this up until now... Very Happy

I have voted yes. It seems like a reasonable suggestion and it would definitely increase the security.

by MrMario February 24th 2011, 7:53 pm

Thanks all for your support.

by ToTheFuture March 4th 2011, 5:47 pm

2/3 questions= brilliant!
locking account if "Yes" clicked= not sure, maybe if admin can add question options onto preset?
IP showing= not good idea at all Shit

by vervada March 4th 2011, 6:44 pm

Sounds like a good idea to me.

by Adam360 March 4th 2011, 6:58 pm

My bank uses a system of ONE security question, but it has a tip that you ut before it

Example...

What is the name of your first teacher - (Unsure?)

Tip - Has the name of a famous comedian

Now you have seen the tip, it may remind you that it was Mr Bean

I think that may work better =]

by ToTheFuture March 4th 2011, 8:41 pm

Smart.

BUT-- it shouldn't be case sensitive! That happens to me all the time...

by Guest March 15th 2011, 5:57 pm

Voting yes - anything to improve security. On the assumption that the Security Question/Answer options will be things that anyone can't possibly forget about themself - such as "Mum's maiden name", "Your first school", "Your father's town of birth" etc, as already mentioned.

Cas

by MrMario March 15th 2011, 6:03 pm

ToTheFuture wrote:2/3 questions= brilliant!
locking account if "Yes" clicked= not sure, maybe if admin can add question options onto preset?
IP showing= not good idea at all

How would you like if someone comes and tries to access your account without permissions or knowledge? Would you like the option to see the IP and be able to ban this person?

My bank account does this and it works.

by Guest March 15th 2011, 6:12 pm

Yes, my bank account does this too, Mr Mario. I think its an excellent idea.

by ToTheFuture March 18th 2011, 1:14 am

Good point... I was thinking for the safety of the user resetting, but I guess that's smart. Razz

by lalalamda22 March 18th 2011, 3:25 am

I totally love this idea. Luky or Typlo need to see this topic. This would really help with security.

by Guest April 21st 2011, 7:48 am

Reverse Simplicity wrote:Vote yes! More security = Better always!

by Guest October 28th 2011, 8:25 pm

My vote is Yes Hello

by Stephen- October 29th 2011, 12:30 am

Vote Yes ... Wink

by S(o)ciaL October 29th 2011, 12:43 am

Vote : Yes

by Guest November 14th 2011, 9:46 pm

Amazing idea I think, my vote is Yes! Wink

by Lillia November 15th 2011, 10:25 pm

Yes! I think it's a great idea.

by musket November 15th 2011, 11:26 pm

Excellent idea voted yes Smile

by Omu January 3rd 2012, 11:40 pm

Very good idea Smile

I vote yes.

by Guest January 4th 2012, 10:11 am

Sanket wrote:A definite yes from me.

Agree!

by koolkat96 February 12th 2013, 3:00 pm

This is a very nice option!

It can avoid people who try to hack user's account.
Like for example :-

Username : username123
Password : ********

And then can be the security question like :-

Security question : (ex:)What is my fave color?
Answer : *******

You never know when somebody tries to hack accounts in any forum.

by Count Dooku January 17th 2015, 4:33 pm

Hi, MrMario! Wink

I suggest that we add a security question(s) in case you forgot your password.

You can add up to three questions and have to get 2 out of the three to be able to reset your password.

When we click on Forgot password we have to enter are email but that is too easy for someone who knows are password to the email.

It would be nice to add a security question because the person may not know your answer and would help prevent people who shouldn't have access to that account.

When you answer all three questions wrong the account is locked out for 90 minutes (which could be changed by Forumotion) and an email is sent to the person say are you the one trying to reset your password? If so your account has been locked.

This would also include an IP of the person who is trying to reset the password. If you aren't trying to reset the password please view this to help prevent someone gaining access to the account.

If you still have problems with not remembering your questions or password you can still come to the support forums and ask for a password reset.

Thank you for reading my suggestion and remember to vote.

Wanting to help a fellow FM "helper", I chose to vote yes.
Your idea sounds very interesting, and who wouldn't want an extra safety?

PS: @koolkat96 ! Believe me you can, Wink

It can happen that a hacker steals your email, gets the passwords and everything related to it, including the attached "Forumtiontion" account details. (so yes, you mark a point, my dear koolkat96 once saying that the option will prevent the hack from entering the attached forums, unless of course the forum creator is so stupid to keep his passwords and other details ready for the hacker to serve himself)