"Forgot password" wording change suggestion

[OrPiper]

I would like to recommend a change in the wording that is displayed if someone types in an e-mail address that doesn’t exist. I believe that telling the user that the e-mail address doesn’t exist only invites someone determined to brute force the site. I would propose that whether the e-mail exists or not that it say something like the following:

“An e-mail will be sent to [e-mail address] with a new password.”

Then instead of a “Reset Password” button have the button return the user to the log-in page.

Thanks

[mbrsolution]

Hi, are you referring to the registration form?

[Author]

Posts