Include validation link in Lost Password email
Short, concise description of the idea
When a password reminder was requested for an unvalidated account, a validation reminder and link would automatically be included in the email. This should be done with the password reset system as well.
Full description of the idea
With the reset system, a user is sent a new password and is then prompted to change to a password of their choice. However, an unvalidated user can not make this change. This leads to confusion, because the user must be logged in to request a new validation email, and many users do not realize that they can log in with their reset passwords. As a result, many users find themselves in what they believe to be a catch-22 of needing to log in to validate, needing to change the password to log in, and needing to validate to change the password.
If a validation link were automatically included in the second email along with the new password, this confusion could be avoided.
- Prevents user confusion and frustration
- Fewer steps in the process for all unvalidated users, as they no longer need to get a validation error, request an email, go back to email account and validate, then resume password change
An ordered list of problems/issues involved
- I can't think of any - reinstating a disabled process should be relatively simple, and as far as I can tell it would not compromise account security.
An organized list, or a few short paragraphs detailing suggestions for implementation
- Take whatever caused this before, and turn it back on.