The following is a quick post on how I would design a secure password recovery/ forgot password mechanism. I hope this is useful to you as you can use portions of this policy for your organization as well.  I would design a secure password recovery/ forgot password mechanism the following way: First, if a user were...Read More