WHat do you think are the stuff that I must require from a user when he/she comes asking to remind him of his/her password.
I do not think asking only for the username is enough anymore.
What is the latest trends in this?
If all you are doing us emailing a new password to the registered email address (which is all you should be doing) then I don’t see the need to ask for anything more than their username or email address.
Thanks, you are clear, since the e-mail is the username too, I am going to ask for that.