"choose your own adventure: password reset [keynote]" - moss (purplecon 2019)
Channel: purplecon
Date: 2019-10-16

moss

You build or are part of a team that has a thing on the web that does stuff for people. And those people would appreciate it if other people couldn't pretend to be them on your website doing their secret squirrel stuff.

So, you decide to have people login in with a password. It'd be mighty nice of you to give people a way to recover their accounts when they misplace their passwords.

Password reset flows are a choose your own adventure where the players just  want to be able to secret squirrel again, and if you're in charge of one let's learn about some game overs everyone would like to avoid.

Wed Oct 16 11:45:00 2019 at Plenary Room