what about one that doesn't let you login as by default it send 2fa to email but to change that you need to get 2fa code on email that timeout when you finally get email?
Enter password
"Password incorrect"
Click Forgot password
Wait for email
Get email
"Create new password"
Enter password I thought I had set
"Password cannot be the same as previous password"
I had a state government website not send an email for between 12 and 18 hours with my password reset link in it. The kicker is that it was a link that was only valid for 1 hour. I guess I should have woken up at 2:30 am to open the email when it got to my inbox.
resetting my grandma's Facebook password and they took 3 hours to send me the necessary text to actually change it. theyre aware that their primary user base is confused old people, right????
i had to wait half an hour for Br**dcom to send me a stupid confirmation link because i dared to download vmware. also, their website sucks so bad, its literally a hedge maze and several hoops just to get to a download link for ONE free program
Sharing what happened to me a few months ago. If your SaaS uses the cheap Sendgrid plan then they use a shared IP which constantly gets throttled for hours or even days by major providers like Hotmail. And then your users complain about missing Forgot Password emails. Sendgrid sucks.
Also, can we just ban email magic sign in links being the only option? I love needing to sign in to something and having to wait forever to get the email EVERY TIME.
Comments
"Password incorrect"
Click Forgot password
Wait for email
Get email
"Create new password"
Enter password I thought I had set
"Password cannot be the same as previous password"
"Enter e-mail"
"Invalid. E-mail not registered"
> okay, create account
"Welcome, enter e-mail"
"Unavailable! This e-mail is taken."
One of them had a client-side app intended for synced login, which instead prevented creating a new account.
https://www.reddit.com/r/TikTokCringe/s/CjlsDL6iSD