nextcloud / nextcloud/server

Improve the reset password webpage

Open
#51,847 2 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

0. Needs triage design enhancement feature: authentication
Dominant language
PHP
Stars
36.9k
Forks
5.2k
Avg merge
2d 3h
Merged PRs (30d)
713

Description

How to use GitHub
  • Please use the 👍 reaction to show that you are interested into the same feature.
  • Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
  • Subscribe to receive notifications on status change and new comments.

Is your feature request related to a problem? Please describe.
If a user resets his password via e-mail using the link therein, the user is presented with a NC webpage which shows only one input field for the new password and a button to reset the password. This works, however, the process can be improved. The problem is that there is no "eye" icon to show/hide the password, thus any typo goes unnoticed and forces the user to repeat the process if need be. There is also no second input field to verify the password typed into the first/only input field. This also prevents users to check for typos.

Image

Describe the solution you'd like
A possible solution is to:

  • add an "eye" icon to show/hide the password

or

  • add a second input field to repeat/verify the password entered into the first input field

Basically to do it like it is done already in personal settings > security:

Image

Describe alternatives you've considered
None

Additional context
None

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start at the password-reset webpage shown after following the email link, then compare it with the existing controls in personal settings > security. Determine which proposed interaction is intended and verify the reset flow still handles invalid or mismatched input correctly. Done means the reset page provides a way to catch password typos before submission.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication, frontend
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.