Authenticate with email and weird things about it

Game Design
2

Hello @jsonberg215,

I will answer each question by their respective numbers:

  1. This question seems to be a duplicated of this one made by you, which was already answered. link Forgot password system
  2. Exposing such details will allow an attacker to fine tune its attack to your game. It’s a best practice to avoid reveal as much info as possible to non-authenticated people. An attacker could even use that to find out the emails of your player base for example.
  3. To help you here, I will need more information. Could you share some snippets of your code, log errors,etc :pray:
  4. please check iteam 1 in this list
  5. there are security implications on every decision, thus the game designers should think about them.
  6. The status is to indicate if an account was verified or not. This post should help you with that. Link Email Verification Status

Best,
Flávio