[Omniscient]

I finally just came up with a perfect security idea.

A secondary email address that's non-changeable and encrypted in the database.

The secondary email if used will reset the password.

It's perfect as long as members remember their secondary email addy.

I can't work on this idea now but I think it's a real winner.

Too many members come up with ideas that they aren't aware are either difficult to implement or would cause more problems than help.

[hxkd]

Sounds good Omni! I hope it keeps hackers away.

hxkd

EDIT:
Sorry for LQP but I had to be the first person to post :).

[King]

I think that it's a good idea, Omni.
But, I guess, there are some better ideas, imo.
Edit: You're right. This is the best possible idea that doesn't require a lot of work.

[Moralitas]

But what if someone gets access to an account before the user had added this? Like the day you add it to the site.

Edit:

Too many members come up with ideas that they aren't aware are either difficult to implement or would cause more problems than help.

Too many members don't search, nor think before suggesting. That section needs some kind of additional feature like an approval system, and after the approval, administrators look at it.

[eiqht]

I like it, the only problem is the remembering part for members.
I recommend they write in notepad and just save it.

[RDCA]

Couldn't this screw over an account though? What if the "hacker" sets his email as the second email. Then he will have constant over right.

[Riggs]

I'd give Omni a Blue Peter badge if he new what it was.

[S70N3R]

Just say the users Secondary email is compromised?

[Mr Kewl]

This sounds really good.
And Suggestion : Make a secondary account use only for HF>

[Nov]

Something like the gmail system? That would be good. Just today I forgot my gmail password and would have been in trouble on for having a secondary email.

[JrSadFish]

sounds cool. But a bit confusing.

[Moralitas]

sounds cool. But a bit confusing.

You will have the ability to reset the password with that secondary e-mail. The secondary e-mail cannot be changed, and it cannot be viewed because it's encrypted. No matter what happens, if you're the original owner, you will get access to the account.

[King]

You will have the ability to reset the password with that secondary e-mail. The secondary e-mail cannot be changed, and it cannot be viewed because it's encrypted. No matter what happens, if you're the original owner, you will get access to the account.

But, you stated something important in your previous post.
What if the hacker sets-up that email?

[▫►βστ-иμی◄▫]

Couldn't you implement a required secondary password, that can only be entered via on-site keyboard?
Thatd made account stealing nearly impossible.

[BaussHacker]

I thought there already was something like this.

Anyways, that's a good idea and I will look forward to it.

But I'm already secured like this, at least for my mail. As I got 3 emails connected to it.