Signing back into the Community for the first time? You'll need to reset your password to access your account. Find out more.
Forum Discussion
Solved
Username Change inconsistent
When following instructions (!!) and changing my password for the new forum I was able to use my old username, which is the same as my email address. I was able to generate and save a new password (...
This restriction actually comes from our platform provider, but it’s an important one that we stand by. Using an email address as a public username isn’t a great practice from a security and privacy standpoint—it makes it easier for bad actors to target accounts with phishing or other attacks.
I know it’s an adjustment, but if you need help updating your username, just let us know—we’re happy to assist!
I encountered the same problem. It seems like a silly and arbitrary restriction to disallow email addresses as user ids if they are >15 characters.
- 1P_Blake
Community Manager
This restriction actually comes from our platform provider, but it’s an important one that we stand by. Using an email address as a public username isn’t a great practice from a security and privacy standpoint—it makes it easier for bad actors to target accounts with phishing or other attacks.
I know it’s an adjustment, but if you need help updating your username, just let us know—we’re happy to assist!
I understand your point, Blake, but there are many sites that allow the email address for logging in, but then display only a username to the public. That seems like the best of both worlds, preserving privacy but letting the user use their familiar email address to gain access.
But of course the real answer is Passkeys. You guys are major proponents of that superior approach, and it would have been nice if you had chosen to use them on your new site.
To quote a respected security expert,
“Passkeys are simpler to use than passwords because there's nothing to memorize, type out, or paste in. Instead, you sign in to accounts with a quick biometric scan or device PIN. Unlike passwords, you don’t have to come up with anything to make one or worry about how complex they are. Every passkey is strong and can only be used for one website or app. That means each account always has the best protection.”
