-
Suggestion
-
Resolution: Unresolved
-
None
-
1
-
Issue Summary
Currently in our OTP email sent to users, we attach the OTP itself on the subject line so it’s quicker for users to view the OTP. As a security requirement some teams recommend removing the OTP from the subject line as an improvement.
Steps to Reproduce
- Trigger an OTP reset for a user.
- Review the email subject received.
Expected Results
The OTP is not visible in the subject line.
Actual Results
The OTP is visible in the subject line.
Workaround
Currently there is no known workaround for this behaviour. A workaround will be added here when available