I forgot my password and would like to reset it. The “forgot password” on the login page doesn’t work, tried it with Username and also email address. Please help 😔

  • rs5th@lemmy.scottlabs.io
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    1 year ago

    I’ve seen reports of people who haven’t tried to reset their password getting a reset notification, I bet the email issue Beehaw is having is exposing some buggy behavior in Lemmy’s notification system. The random email address working makes sense, as that email likely isn’t attached to a user, so the send function never gets hit. At the same time, to prevent enumeration attacks, Lemmy probably doesn’t have a motivation that says “That email address doesn’t exist”