[opencms] Re: [opencms-dev] Forgot Password Email

[Jorge González]

Hi Jason:

I think the actual opencms password management is right, pass is one-way
hashed.

Why don't you add a "password hint" question, and reset the password to a
new generated one if the user enters the hint correctly ?

You could check the first login with this new generated password and force
the user to change it.

Also you could regenerate the passwords as admin, that is, force a new
password by hand. If the user is SO forgetful, he could contact the admin
(put this instructions in the "remember" page) and ask for a new pass.

Well, only a few ideas...

Jorge.