# Authenticate with email and weird things about it

**URL:** <https://forum.heroiclabs.com/t/authenticate-with-email-and-weird-things-about-it/3021>\
**Category:** Game Design\
**Created:** [September 9, 2022, 2:32pm UTC](https://forum.heroiclabs.com/t/authenticate-with-email-and-weird-things-about-it/3021 "2022-09-09T14:32:15Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![flavio](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.heroiclabs.com/flavio/32/2161_2.png) [@flavio](https://forum.heroiclabs.com/u/flavio)\
**Post date:** [September 13, 2022, 10:01am UTC](https://forum.heroiclabs.com/t/authenticate-with-email-and-weird-things-about-it/3021/2 "2022-09-13T10:01:35Z")

</div>

Hello @jsonberg215,

I will answer each question by their respective numbers:

1. This question seems to be a duplicated of this one made by you, which was already answered. link [Forgot password system](https://forum.heroiclabs.com/t/forgot-password-system/3008)
2. Exposing such details will allow an attacker to fine tune its attack to your game. It’s a best practice to avoid reveal as much info as possible to non-authenticated people. An attacker could even use that to find out the emails of your player base for example.
3. To help you here, I will need more information. Could you share some snippets of your code, log errors,etc 🙏
4. please check iteam 1 in this list
5. there are security implications on every decision, thus the game designers should think about them.
6. The status is to indicate if an account was verified or not. This post should help you with that. Link [Email Verification Status](https://forum.heroiclabs.com/t/email-verification-status/1363)

Best,  
Flávio

---

_[View the full topic](https://forum.heroiclabs.com/t/authenticate-with-email-and-weird-things-about-it/3021)._
