Page MenuHomePhabricator

Add a configuration option to make email mandatory during account creation
Closed, ResolvedPublic

Description

During the process of account creation, the 'email' field is optional. If user does not enter the email during account creation and user forgets his password, then user does not able to access account by resetting password using "Forget password".

Also there is not mobile number verification is added. Hence i suggest to make an email OR mobile number compulsory/mandatory field so user can easily reset the forgotten password.

See also:
T58028: Show Echo web notification (asking users to consider providing an email) to users who don't have an e-mail address associated with their account
T58074: Echo: Generate periodic web notification to nudge users to confirm an unverified email address
T215633: Emailability: Prompt users during email skip attempt

Event Timeline

Vaibhav.phale1 updated the task description. (Show Details)
Vaibhav.phale1 removed a subscriber: Aklapper.
Dereckson subscribed.

@Vaibhav.phale1 There is a balance to find between security and privacy: when you ask a mail, you ask people to provide a private information (or a burden to create a new mailbox separated from the main address). Did you take that in consideration in your analysis and what are your thoughts about this?

It seems that setting $wgEmailConfirmToEdit = true is a way to achieve this, but I'm not sure if this exactly matches your requirements.

@Vaibhav.phale1, are you requesting this for Wikimedia projects, or MediaWiki in general?

Aklapper changed the task status from Open to Stalled.Jul 20 2017, 6:51 PM
Aklapper removed Vaibhav.phale1 as the assignee of this task.
Aklapper raised the priority of this task from Medium to Needs Triage.Jul 21 2017, 8:16 AM

@MaxSem, I only request that Wikipedia have to make email I'd or other user verification detail as mandatory field. So they can easily recover their account if they forgets the password. Because, nowadays peoples are having multiple accounts on different websites. They unable to memorize all user I'd and password.

Anomie renamed this task from To make an Email I'd as a mandatory field. to Add a configuration option to make email mandatory during account creation.Jul 21 2017, 1:56 PM
Anomie updated the task description. (Show Details)

I tried to clean up the description and title for grammar and comprehensibility.

There seems to be two or three requests here:

  1. Make the email field mandatory during account registration, or provide a configuration option to do so.
  2. Add the ability to set a mobile phone number as a property on the user account, along with the ability to use this number for password reset. Then change #1 to make it mandatory that either email or phone number be specified.
  3. (maybe) Enable either #1 or #2 on WMF wikis.

#1 would be easy enough for someone to do, and simply having a configuration option for it doesn't seem very controversial.

For #2, adding the ability to input a mobile number would be easy enough (assuming we store it in the user_properties table rather than adding a column to user), as would changing the behavior of the configuration option in #1. Adding it to CentralAuth (SUL) would be somewhat more difficult, since there's no globaluser_properties table yet (see also T16950). Actually using the mobile number for password reset would require integrating and configuring an SMS gateway service, which might be difficult and/or expensive.

#3 would be an easy configuration change once the option exists, but would be a potentially significant policy change that may need significant discussion.

Because, nowadays peoples are having multiple accounts on different websites. They unable to memorize all user I'd and password.

That's why password managers exist.

OK @Anomie sir. My intense is only to make Wikipedia account user friendly. So, users can able to reset their password easily. But wikipedia policy doesnt allow it to make email id as a mandatory fireld. You are also correct. Anyways, Wikipedia finds the better solution for this. (And sorry for my poor english). 😅😅😅

Aklapper changed the task status from Stalled to Open.Jul 29 2017, 4:41 PM
Aklapper triaged this task as Low priority.

See also: T159837: Introduce confirmation step if user tries to register without email
which doesn't make it a requirement, but does make no-email an option you need to actively confirm and warns you of the consequences.

Jdlrobson-WMF claimed this task.

It seems that setting $wgEmailConfirmToEdit = true is a way to achieve this, but I'm not sure if this exactly matches your requirements.

Agreed. I think setting this would be another conversation but seems out of scope for this ticket.