"Do NOT close this window until you have completed your password reset request"

[cjx2240]

Does anyone else think this is kind of a strange way to handle password reset? I've never seen this anywhere else.

I've had a few very confused users caught out by this because they didn't read the full message, either they close the window or they open the email on a different device.

Anyone changed this to work differently?

This refers to ProcessForgotPassword.module if that was unclear.

[psy]

@cjx2240 yep. LoginRegister & ProcessForgotPassword modules could do with some serious re-work. Especially awkward when the user registers in a browser that's not their default or on a different device

[arjen]

Agreed. It makes sense from a security point of view, but I've encoutered numerous people who browse in one browser while their default browser is another one. They are not even aware.

[matjazp]

https://github.com/ryancramerdesign/LoginRegister/issues/2