Forgot Password Error for Invalid Email (email address that doesn't exist in dataverse)

[AnnaEllen]

Hello - 

I am testing the forgot password functionality in my powerapps portal, and I am running into an issue. If I enter an email address that I know doesn't exist as a contact in my dataverse, I am still getting the same "success" message that I would get for an email that does exactly match a contact in dataverse. I would expect some sort of error to be thrown based on what I've seen from other threads online.

[Mira_Ghaly]

@AnnaEllen 

Can you try to do an advanced find on the contacts entity and check if there is a UserName with the same email address?

[OliverRodrigues]

Hi @AnnaEllen this is actually a security best practice for this type of functionality. If you type an invalid e-mail and display a message "e-mail not found" then you are giving away the information that that e-mail is or not available in your system.

Maybe if you want you can change the message to be displayed, something like "If this e-mail address matches our list of records, you will get a forgot your password link"