Security

Ask something
Discussion Locked

Secure Password Change

0 helpful
1 reply

by lhampton58 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am a computer systems analyst for a medium size organization. When our users get locked out of their system or can't remember their password, we change it over the phone. We are looking for a more secure way to do this. Any suggestions?

1 reply

by rob.wilcox1

We do the same thing, however it is best to think of a series of questions to ask the user to verify "who" they are. Just like if you phone your insurance company or the bank, they run through "security checks". Do the same for a user. Ask them their office extension, the date they were highed, if they can remember the last 2 out of 5 people they emailed.. Any group of things that you, or your IT staff, will already be able to find out the answer to.

Thanks

This discussion is closed to new replies.