Force change password when re-enroll
Posted 10 March 2014 - 04:10 PM
Posted 10 March 2014 - 04:15 PM
If you re-enroll an existing account and do not change your password you can still get in with your old password. You should be forced to change your password. How do I implement this?
There is not a way to implement this, as this would not typically make sense. When you enroll or re-enroll an account, you are strictly enrolling your account to update security questions to be able to later reset your password if you get locked out.
Think of it this way, if you were using gmail and wanted to update your security questions, it asks you for your current password(Which is what re-enrolling does). It doesn't then force you to update your password or change your password, it just updates your current questions.