I am working on an auth system that I intend to use throughout several websites I am working on, they will all use the same userbase.
I am curious what your thoughts as a user on the following things:
- Forgotten Password Security Question
- Activation Email
As a user they both make me semi-annoyed having to do more work just to get the content and discourages me from using the website. However from a developer standpoint I like them better for security features. What are you thoughts on them and should I implement them into my system?