I just tested the password reset function with a fake email address and it still notified me that an email was sent. It would be better if it actually checked if such an account existed so that users realise they need to create an account first. Perhaps a button to ‘create new account’ as well […]