Products.PasswordResetTool-2.0.19-1.lbn19.noarch

The Password Reset Tool hooks into the standard mechanisms for password mailing provided by the CMF in the Registration Tool and certain skins and replaces this with a facility for resetting passwords with email authentication.

This is useful not only to keep passwords out of cleartext email and is absolutely necessary if you choose to encrypt your passwords (and you should.)

See the INSTALL.txt file for details on installation, and the LICENSE.txt file for the license this Product is under.

Note, of course, that you must have a working MailHost to send email!

The Password Reset Sequence from the User's Point of View

The user will observe the following steps.

• User forgets a password and clicks "Forgot your password?", which goes to a form that asks for a username. User fills this in and clicks a button to proceed, which goes to a form explaining that an email has been sent. User receives an email with a URL containing a random, unguessable key and opens it in a web browser. This is a form that asks for username and password, which goes to a form reporting success (or failure, if expired or illegitimate.)