More in this section

Forums / Developing with Sitefinity / Password Recovery by username

Password Recovery by username

2 posts, 0 answered
  1. Yuan
    Yuan avatar
    3 posts
    15 Sep 2015
    03 Mar 2016
    Link to this post


    For the requirement of the site I am working on, I need to set "requiresUniqueEmail" to false. 

    However, the Forgot Password form (from the "Login" widget) asks only for email address. When I tried it with an email that is associated with more than one account, the password link was sent to only one of the users. 

    Is there another setting that I need to change so that users can reset password by entering their username? If there is no such setting out of the box, is there  workaround to this?

    Thanks in advance for any help/suggestions.
    Sitefinity Version: 8.2.5900.0

  2. Sabrie Nedzhip
    Sabrie Nedzhip avatar
    534 posts
    17 Aug 2017
    07 Mar 2016
    Link to this post

    Please note that when the user wants to reset the password by clicking on the Forgot your password? link, Sitefinity has internal logic to get the text entered in the input field by the user and then search for a user who has this email. This logic is internal and cannot be extended to make Sitefinity to search the user by its username and not the email.

    Moreover, Sitefinity sends the recovery password email to the email entered in the input field by the user. This way we can make sure that only the user who can access the email will be able to access the information about changing the email. So, for security reasons we do not recommend to have multiple users with the same email address.

    In addition to this, we have logged a feature request to allow users to recover their passwords by username. Here is the link to the description of the feature request:

    You can subscribe to receive notifications for the feature request including new comments, votes, status changes by clicking on the "Follow this item" link. If you would like to unsubscribe, you can unfollow the item by removing "Following this item”.

    One of the options is that the admin user resets the password for this user through the backend UI and the the user will be able to log in the Sitefinity and to change it from its profile page and set the desired password.

    Sabrie Nedzhip
    Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Sitefinity CMS Ideas&Feedback Portal and vote to affect the priority of the items
2 posts, 0 answered