-Don’t allow user to forget or change his/her password for more then 5 times in a day

-When account is created, a code will be sent to the user’s email account to verify whether the created is the legit owner of the email account set

-Prompt user when email user to inform password have been set and device and IP address used.

-con

-Allow user to set the same password over and over again, which will result in account being bruteforce by hackers.

-no 2FA
-Password requirement of at least 6 characters long and suggestion to user to create a strong password by having a combination of letters, digits and punctuation marks. This allow user's password to be not easily bruteforce by hackers

-cons- allow user to set a password that is used before when resetting the account                      password hence will allow hackers to bruteforce to the account

          -  No 2FA

-Pros 
– Verify user is legit by having a image verification “ I’m not the robot prompt”

 - Verify user own the email account entered to create an account by issuing a code to be sent in the email account when creating the account.

  -reset password link is sent to the email account
-Password requirement of  using 4-15 characters with minimum of 2 letters and digit in order to create a more secure password and not being bruteforce easily by hackers.

-Don’t allow the user to choose password that have been used before

-Verify user with sms or email codes sent

-Prompt message is sent to owner when password is successfully sent

-2FA log in options are available for user who wanted their account to be much more secure

-Allow user to enter their phone number to their gmail account, code will be sent to their mobile number via sms 
-Password requirement of use 8 or more characters with a mix of letters, numbers & symbols in order to create a more secure password and not being bruteforce easily by hackers.

 

 

Advantages:
- User can set up 2FA
- User can rest their password any time.

- Users can download the app in their mobile phone, they can register the mobile app; they can either set thumbprint to login or a 6-digit pin.

- Users can scan the code shown on their laptops, using their phone app. This makes it more user friendly easier to excess.
- Password cannot be the same as User ID

- Password to be between 8 – 24 alphanumeric characters, preferably containing upper case letters and symbols, with at least 1 letter and 1 number.
- Common passwords are disallowed, e.g., “password123”, “pwd12345”.

- Users new password cannot be the same as any of your previous five passwords.

Disadvantages: 
- Confidential information of users are stored.

- Elder users might not be able to use high tec features like scan QR code