User password reset without email confirmation


#1

Hi
I have enable “send emails” option in Realm cloud settings to enable reset password functionality in our iOS app. Password reset is working but the problem is that we don’t what to verify email addresses of newly registered users. At the moment all newly registered users receive “email address confirmation” emails.
Are there any way to disable “email address confirmation” emails and enable only “password reset” emails?

Thanks.


#2

Don’t disable it. If you send out password reset emails to a random email address, your app’s security basically doesn’t exist.