I've been getting spammed by password reset requests, as it turns out you can just spam anyone's email via Discord by just using their username to send password reset requests.
Twitter has an "Ask for more information before sending a password reset request" option to prevent this.
I'm asking for a similar feature. The default for most social media is asking for the associated email, but Discord lets you do this with just a username which is available to everyone. Please at least change it so it asks for my email before sending the request.
Please sign in to leave a comment.