5 login attempts is too few
 

Just a heads up, the site only allows 5 login attempts before locking out an account. Those 5 attempts are no better than 100 attempts at stopping a brute force hacker from trying to hack into the system.

What such a small number of login attempts will do, and ONLY do, is lock out legitimate users who probably don't use the site that much and are trying a few of their passwords to login to the system.

The functioanlity is not idea and lower than the stardard for websites nowadays.

You forgot your password in the few hours since you joined?

I can't think of a website offhand that allows more than 5 bad logins before a lockout. 5 is very common, even 3 in some cases.

Yep. Some airline and hotel sites, never mind banks, allow two tries and lockout on the third.

There are utilities out there to "remember" passwords - and even some that assign very difficult to crack passwords and keep them in a protected file.

We value our members' privacy, and I doubt too many will try a brute force attack on FT - your bank, maybe. ;)

Password Reset
 

Unfortunately the password reset process is broken.
I asked that mine be reset, and 12 hrs later I receive a link to click.

Click link, temporary password arrives 5 hours later.

I can't post what I thought nor said throughout this process.

It's the worst password reset that I've ever encountered and it amazes me that FlyerTalk didn't address it last century.

The problem is email.

Some email hosts block FT emails. Or delay them. Then your password reset doesn't work or takes too long.

We always recommend gmail. Seems to have the fewest problems.

Using GMail, IME, actually addresses several problems:

GMail seems to be quite robust about catching spam, account hijacking, not delaying e-mails, etc. and of course it's free.

Setting up a GMail account one uses for BBS, or even just FT, may help protect individuals' privacy.

I am having a unique problem as I cannot remember my password and cannot reset it either as the original email used was deactivated 3 years ago by me. I have sent a PM to Bob.

I don't mind using an older account djjaguar but I'd like my djjaguar64 activities and posts and Evangelist status linked to djjaguar. Hope there is a resolution for me