Shared secrets

A shared secret is an encrypted value used to retrieve the new password for an account when it has been recently changed or reset. This value is defined in your personal profile information and can be changed.

Shared secrets are used to ensure secure password retrieval, whenever a password is reset for a user..

When password retrieval is set, an email is sent to the user with a link to a website. The user enters a shared secret in order to retrieve the newly reset password on another website..

When password retrieval is not set, the password is sent in an email to the user. This method is not as secure as retrieving it with a shared secret on a separate website.

Parent topic: Passwords

Parent topic: Profiles