# GSoC 2018 - Reset Password via Email Project

**URL:** <https://talk.openmrs.org/t/gsoc-2018-reset-password-via-email-project/18066>\
**Category:** GSoC\
**Created:** [May 17, 2018, 2:27pm UTC](https://talk.openmrs.org/t/gsoc-2018-reset-password-via-email-project/18066 "2018-05-17T14:27:25Z")\
**Posts on this page:** 1\
**Showing post:** 11

<div class="post-metadata">

**Author:** ![burke](https://talk.openmrs.org/user_avatar/talk.openmrs.org/burke/32/17_2.png) [@burke](https://talk.openmrs.org/u/burke)\
**Post date:** [June 1, 2018, 3:25pm UTC](https://talk.openmrs.org/t/gsoc-2018-reset-password-via-email-project/18066/11 "2018-06-01T15:25:30Z")

</div>

> [@wyclif](#):
>
> Why can’t it be longer?

Those are arbitrary constraints. I figured you’d want something long enough to not to be guessable and not so long that it would cause broken links in email using plain text.

My point was that having a list of requirements would help answer @harisu’s question. So, I came up with some random example requirements off the top of my head to demonstrate how, if they were requirements, might influence the choice of using JWT.

---

_[View the full topic](https://talk.openmrs.org/t/gsoc-2018-reset-password-via-email-project/18066)._