password reset

[Alex-Jordan]

I've been wondering if we could implement a password reset flow. It feels like a medium-sized project, but also there should be good workflows to follow for making it happen.

[drgrice1]

What exactly do you mean by a password reset flow? Do you mean a link on the login page that can be used to reset your password if you have forgotten it?

[Alex-Jordan]

Yes, and by "flow" mean the mechanics of how that works for the user. An option is that you could enter your username..but maybe you should actually enter your email address. And then what happens? You could get an email with a link that expires, and use it to reset the password. Or I can imagine other things. I know what I've seen used, but I don't know what's the most secure and/or the right thing for WeBWorK to do Alex Jordan Mathematics Instructor Portland Community College

…

On Fri, May 15, 2026, 5:44 PM Glenn Rice ***@***.***> wrote: *drgrice1* left a comment (openwebwork/webwork2#2976) <https://urldefense.com/v3/__https://github.com/openwebwork/webwork2/issues/2976*issuecomment-4464800674__;Iw!!Ka_JY85zDv0FFw!hqiSJ3aEe5Jnsy-Im5MUkpyqAaipR8hUMy51tMnHnvjS4fAmEhRiJT24VwMk9wspuUDhoyNkJjJ_Uw1vMBk-bAcku2k$> What exactly do you mean by a password reset flow? Do you mean a link on the login page that can be used to reset your password if you have forgotten it? — Reply to this email directly, view it on GitHub <https://urldefense.com/v3/__https://github.com/openwebwork/webwork2/issues/2976*issuecomment-4464800674__;Iw!!Ka_JY85zDv0FFw!hqiSJ3aEe5Jnsy-Im5MUkpyqAaipR8hUMy51tMnHnvjS4fAmEhRiJT24VwMk9wspuUDhoyNkJjJ_Uw1vMBk-bAcku2k$>, or unsubscribe <https://urldefense.com/v3/__https://github.com/notifications/unsubscribe-auth/ABEDOAEAB734ZKXKGDVBYAD4262YDAVCNFSM6AAAAACY5AVEYSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DINRUHAYDANRXGQ__;!!Ka_JY85zDv0FFw!hqiSJ3aEe5Jnsy-Im5MUkpyqAaipR8hUMy51tMnHnvjS4fAmEhRiJT24VwMk9wspuUDhoyNkJjJ_Uw1vMBk-a8yd9mo$> . Triage notifications on the go with GitHub Mobile for iOS <https://urldefense.com/v3/__https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675__;!!Ka_JY85zDv0FFw!hqiSJ3aEe5Jnsy-Im5MUkpyqAaipR8hUMy51tMnHnvjS4fAmEhRiJT24VwMk9wspuUDhoyNkJjJ_Uw1vMBk-H-gTdxI$> or Android <https://urldefense.com/v3/__https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign*3Dnotification-email*26utm_medium*3Demail*26utm_source*3Dgithub__;JSUlJSU!!Ka_JY85zDv0FFw!hqiSJ3aEe5Jnsy-Im5MUkpyqAaipR8hUMy51tMnHnvjS4fAmEhRiJT24VwMk9wspuUDhoyNkJjJ_Uw1vMBk-EvA8Y-c$>. You are receiving this because you authored the thread.Message ID: ***@***.***>