User Names and Password Exposed During Sign Up
complete
Eric Swinbourn
When a user completes a self registration and sets their password Document 360 will send a confirmation email with the User Name and Password in the same email. this presents a major security concern. Best practice would be that there is no password sent out as part of the self sign up
Log In
Marshal Ebinezar
complete
Hi Eric Swinbourn, Thanks for your patience, we have done the improvements, Kindly take a look: https://docs.document360.com/docs/december-2021-release-note#enhancement
Manikandan Subramaniam
in progress
Saravana Kumar
Shannon Greywalker
This is a huge issue for us as well.
Mike Boe
This is allegedly in-progress but haven't had an update from Doc360 in awhile.
Marshal Ebinezar
Hi Eric Swinbourn & Kimberly Koester Thank you for your valuable request; we have added this feature to our pipeline and will notify you once it has been implemented.
Mikkel Thordsen
Yes this makes the entire self sign up in private mode unusable, as it would be comical to use this feature and have customers see their passwords sent to them in cleartext.
Kimberly Koester
We've received complaints from clients that the password is contained within the registration email. This is a security issue that should be address immediately. Any update on when this will be addressed?
Dean Miller
This is a massive security issue and should be resolved immediately. Multiple clients have (rightly) expressed concern about this.
John Patterson
We had a client recently share the same concern with us. Masking or removing the password from emails would be preferred.
Load More
→