When Reseting Passwords add a Security Question(s)

Oct

2010

Hello,

I suggest that we add a security question(s) in case you forgot your password. You can add up to three questions and have to get 2 out of the three to be able to reset your password. When we click on Forgot password we have to enter are email but that is too easy for someone who knows are password to the email. It would be nice to add a security question because the person may not know your answer and would help prevent people who shouldn't have access to that account. When you answer all three questions wrong the account is locked out for 90 minutes (which could be changed by Forumotion) and an email is sent to the person say are you the one trying to reset your password? If so your account has been locked. This would also include an IP of the person who is trying to reset the password. If you aren't trying to reset the password please view this to help prevent someone gaining access to the account.

If you still have problems with not remembering your questions or password you can still come to the support forums and ask for a password reset.

Thank you for reading my suggestion and remember to vote.

1 Reverse Simplicity, on 03/10/2010 at 01h04

Vote yes! More security = Better always!

2 Darren1, on 03/10/2010 at 01h05

Reverse Simplicity wrote:Vote yes! More security = Better always!

3 Wellbe6, on 03/10/2010 at 01h13

Darren1 wrote:
Reverse Simplicity wrote:Vote yes! More security = Better always!

4 fan4me, on 03/10/2010 at 03h29

voted YES cause more security is better BUT i know *I* for one always forget my answers to those questions after awhile so a bunch of people, if they're anything like me, could get locked out of their accounts.

5 MrMario, on 03/10/2010 at 03h46

The account would only be locked for 90 minutes thus you can also come here to reset your password.

6 Reverse Simplicity, on 03/10/2010 at 03h50

fan4me wrote:voted YES cause more security is better BUT i know *I* for one always forget my answers to those questions after awhile so a bunch of people, if they're anything like me, could get locked out of their accounts.

Isn't it the idea of these things is to be a question with an answer that never changes. 'birthplace' 'mothers maiden name' etc

7 Mod 4 U, on 03/10/2010 at 04h50

By explaining 90 minutes is too overwhelming, someone can blow off their head with that time limit, otherwise let the administrator choose how many minutes until the account stopped being in lockdown, and default 90.

I'll say "yes" if you include the information above.

8 Sanket, on 03/10/2010 at 06h13

A definite yes from me.

9 fan4me, on 03/10/2010 at 14h15

Reverse Simplicity wrote:
fan4me wrote:voted YES cause more security is better BUT i know *I* for one always forget my answers to those questions after awhile so a bunch of people, if they're anything like me, could get locked out of their accounts.
Isn't it the idea of these things is to be a question with an answer that never changes. 'birthplace' 'mothers maiden name' etc

well sometimes its like "Where was your mother born?" and I have no idea so i always have to ask her.

10 Nomee, on 03/10/2010 at 15h37

yes i think i would be implemented because this feature provide more security to our forum & i had this suggestion in my mind since last week & now it,s already been posted so i just say that it is more secure by adding this option ....... Smile

11 Saxaca, on 03/10/2010 at 23h15

Wellbe6 wrote:
Darren1 wrote:
Reverse Simplicity wrote:Vote yes! More security = Better always!

That kinda says everything.

@ Mod 4 U

I dont wanna blow up my head.. Admin should be able to remove, and edit the limit. Agree with you.

To make this even more safe, what about the Admin making you able to have more questions, with 3 at the minimum?

All in all, this is a great suggestion Very good

--> Voted yes

12 MrMario, on 04/10/2010 at 02h12

The 90 minutes is only an explain do you really think by saying 90 minutes will be implied.

I guess the person who voted no wants his forum to be lost by someone else.

Thanks for the support Smile

13 KingOfSports, on 04/10/2010 at 02h50

I voted yes a while ago but forgot to mention it...

14 Lechin, on 04/10/2010 at 02h51

I give a big thumbs up for this. This is a very good idea. Not only does it provide more security, but it kind of gives us a relief that our password is more safe & secure.

15 MrMario, on 04/10/2010 at 06h31

I'm really not sure why this isn't even made. I mean Gmail, Yahoo, YouTube etc... all have this feature.

16 Darren1, on 04/10/2010 at 06h56

Mod 4 U, if you enter your password in wrong after a few attempts, it's locked for the following 90 minutes, as it presently is.
There would be no time change

P.S. 90 mins = 1.5 hrs Wink

Not THAT long..

17 Dumbledore27, on 04/10/2010 at 13h24

Voting yes. Smile

Another of those (sometimes) extremely useful suggestions Laughing

18 The God, on 04/10/2010 at 17h30

Dumbledore27 wrote:Voting yes.

Another of those (sometimes) extremely useful suggestions

My vote is Yes Wink

19 nathanpc, on 04/10/2010 at 18h00

Saxaca wrote:
Wellbe6 wrote:
Darren1 wrote:
Reverse Simplicity wrote:Vote yes! More security = Better always!

That kinda says everything.

@ Mod 4 U

I dont wanna blow up my head.. Admin should be able to remove, and edit the limit. Agree with you.

To make this even more safe, what about the Admin making you able to have more questions, with 3 at the minimum?

All in all, this is a great suggestion

--> Voted yes

20 Reverse Simplicity, on 04/10/2010 at 18h10

nathanpc wrote:
Saxaca wrote:
Wellbe6 wrote:
Darren1 wrote:
Reverse Simplicity wrote:Vote yes! More security = Better always!

Wow! I made a good post Wink

To add to content the questions should be plentiful, but have only one possible answer (No 'your favorite' junk).
Things like: parents maiden names, first car, first highschool, town born in: are all good ones.

With needing to ask your mother for he birthplace, well at least it means your account is secure. Not even you retain the information required. Like having 2 keys that must be turned at the same time Wink

I would love to see this implemented. As the OP said, this is a default feature on many, if not all, of the most visited websites.