I Forgot My Password
Date: August 2015
Publication: Passwords15 Las Vegas
Source 1: http://www.slideshare.net/spaze/i-forgot-my-password-51450577
Users often forget their passwords, so applications often must have a password reset mechanism. There are several options for how to do it; some of them are good, most of them not so good. Generate a password and send it in an email? No. Security questions? No way. Reset passwords via a phone call? Rather not. This talk presents some really creative examples of botched password reset implementations, as well as a proven method for resetting passwords securely.
PasswordResearch.com Note: Video of presentation available: https://www.youtube.com/watch?v=Tri8NjegAMo
Do you have additional information to contribute regarding this research paper? If so, please email firstname.lastname@example.org with the details.