What data elements are required to assist a user in resetting their password which reduces the possibility that someone else is impersonating the real user?

3.3k viewscircle icon2 Comments
Sort by:
CISO/CPO & Adjunct Law Professor in Finance (non-banking)2 years ago

Kknowledge. It is important to explain to the user the reason for the additional factor, and that information publicly available about them isn't good for security.

Senior Director Of Technology in Software2 years ago

1. Mobile or Email validation - Send OTP on Mobile or Email only.
2. Two factor Auth
3. Security questions