Password Reset Workflow Prompt
Prompt
Design secure password reset with identity verification, complexity enforcement, session invalidation, logging.
Why it works
Out-of-band verification prevents account hijacking. Session invalidation prevents leaked password use.
Watch out for
Over-complex verification frustrates users. SMS OTP is not secure; offer alternatives.
Used by
IT & Ops Teams