How does a password reset link know to log you in and change your password?
In: Technology
When you initiate a password reset request the server will generate a unique temporary token (a short string of letters and numbers) that will be included in the link it emails to you and save it somewhere related to your profile for later. When you click the link the site will then check to make sure the value in the link matches the value it has stored to confirm that the person viewing the password reset page is in fact the person who has control over the email address you have on file.
Latest Answers