: How do you deal with users who no longer have access to their login email? I run a reasonably sized web application and from time to time I get users who for various reasons lose access

@Alves908

Usually they've also forgotten their password.


So, the question is really... "How can you reset a user's password when they don't have access to their email?"

In short, you're going to need a lot more information from the user and consequently will need the user to have previously entered this information into their account during signup.


Alternative email address.
Telephone number. (The user can either repeat the phone number to validate or you can contact them which is preferable.)
Security questions, memorable word, memorable date...


If the above information is not provided then the user needs to be made aware that they are reducing their chances of being able to regain access to their account.

You can also prompt with questions about their account:


When was the account created?
When did they last login?
What type of account?
What method of payment was used?
What actions did they perform on the account?


You can also check their current IP address to see if it matches one of the IPs previously logged in at. (Or an IP address that belongs to the same ISP?)

Obviously some of these later points by themselves are not very strong, but in combination they might be enough.

Vote Up Vote Down