Password Reset Workflow
IT IT Ops
The prompt
Design secure password reset with identity verification, complexity enforcement, session invalidation, logging.
Why this works
Out-of-band verification prevents account hijacking. Session invalidation prevents leaked password use.
Risks & review
Over-complex verification frustrates users. SMS OTP is not secure; offer alternatives.