A user’s password can be reset using our “lost account” page.
This page asks for as much information as the user can provide about their account, from the following options:
- Name
- Email Address
- User / Employee Number
- This is applicable for clients who preferred a username to an email address for the account identifier
- Ethnicity
- Date of Birth
- Date of a health check you’ve taken
- Date of a health MOT completed on a kiosk
Most of those data pieces are collected when registering a new account, either through Tracker or a health kiosk.
None of the fields are required, although at least 3 pieces of information are required to attempt to recover the account.
Multiple lookups are completed on the database to find a unique match to a user account based on the information provided. If a singular account is found based on all checks, the user is allowed to recover their password. If no unique match is found, the user is asked to provide more information.
If the user has previously provided a security answer, this is used to supply a new password.
If the user has not previously provided a security answer, a new password is sent to the registered email address on the account.
Sent to Phil for Punters 1.6.2013 15.43
We have www.wellbeing-people.com/my account if they do not wish clients to use tracker.