开云体育

John,

Shal, wouldn't having an account without a password be a security
issue?

As Duane said, no.

Someone aware of a persons account existence could hijack an
account by logging in, setting a password then even change the email
address if they wished?

Again no.

The only way for that someone to log in as the member would be to intercept the link emailed to the member. And if a crook can do that the member's security is pretty much "game over". That would make the member's accounts at all kinds of services vulnerable, not just Groups.io.

I have encouraged users to take advantage of the features of the web
interface such as photos and databases but I've never suggested that
they at least login once to set a password for security.

There's no need to do so. They don't need to log in unless or until they want to access something in the group's members-only sections.

Shal


--
Help: /static/help
More Help: /g/GroupManagersForum/wiki
Even More Help: Search button at the top of Messages list