I developed the password management system we use at the college and I want to revamp it to allow for self service. Let me explain, if a person does not change their password after 6 months it will be reset for them and they have to contact the helpdesk, prove their identity, then get a new password generated for them. I am kind of getting tired of resetting passwords but I never built in a self service module so people can get their new passwords because I never liked the systems that other sites use. Usually they have you set a predefined question…. you know, something like “What is your cats name?” or something goofy like that. Instead, I thought it might be cool (and maybe safer) to have people set up a password partner. While your password is still valid (and you are logged into the web interface) you enter in the email address of a trusted friend or family member within the system. When your password expires you go to the web site and enter in your login ID and it generates an ID that gets sent in the form of a link (with a detailed explanation) to your password partner. I assume you would give a heads up off line to your password partner that they will be receiving an email from our system. The password partner then clicks on the link and it generates a new password for their friend/family member.
Better yet, every one has a cell phone, why not have them enter in their cell phone number while logged in and we send them an ID to enter into a web form that will generate them a new password? The telecom people are always trying to get a hold of students at their dorm room telephone numbers but the majority of the students do not set them up or never check the voicemail, this way we would have their cell phones on record if we really need to get in touch with them.
I’ll run these ideas by the group and see what they think.
