How do I use admin recovery to reset a user's password? #5263
-
|
One of my friends has forgotten their password, and doesn't have recovery keys. There is an |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
|
Hey @silicoflare, sorry to hear that.... No, you can't use Admin Recovery to reset a user's password. That feature allows the host to reset admin credentials, in case the admin account becomes compromised or lost. The only way to reset a lost account is by using the recovery codes. This is unfortunate, but an intentional design choice. Giving admin the ability to reset an account would mean the account could be compromised at any time - either by the admin, or by bad actors that gain access to the admin account. Allowing a 'user-prompted' or request-based admin reset is no better, because what's to stop me from asking admin to reset your account for me? The only other option would be to set up a recovery email or phone number, which defeats the purpose of Haven's decentralized / sans-verification creation. It's always a good idea to generate and save recovery codes just in case, though unfortunately that does your friend no good now. |
Beta Was this translation helpful? Give feedback.
-
|
I understand, thanks a lot! |
Beta Was this translation helpful? Give feedback.
Hey @silicoflare, sorry to hear that.... No, you can't use Admin Recovery to reset a user's password. That feature allows the host to reset admin credentials, in case the admin account becomes compromised or lost.
The only way to reset a lost account is by using the recovery codes.
This is unfortunate, but an intentional design choice. Giving admin the ability to reset an account would mean the account could be compromised at any time - either by the admin, or by bad actors that gain access to the admin account.
Allowing a 'user-prompted' or request-based admin reset is no better, because what's to stop me from asking admin to reset your account for me?
The only other option would be to s…