I don't see how sending a reset link is secure.
Wouldn't anyone intercepting the email be able to use the reset link themselves and gain access to the account?
Wouldn't anyone intercepting the email be able to use the reset link themselves and gain access to the account?
Providers should send you notifications when you reset your password, they generally don't when you just log-in like normal.