A finding after missing the password of Steemit (And some thought about it)

Today, I would like to login to Steemit but I forgot the password. WTF.

Image URL

I tried to think where it is but you know. Your computer is like an ocean...

Image URL

Here comes the first thing I found: the password is too long and not created by user.

For most of the login system let user to create their own user password. I am not an expert on cryptography, but from a user perspective, custom password is better for human to remember. (maybe only for vote and posting?)

I am feeling frustrated and don't know what to do.

Image URL

I tried to found something like CS or Support and found steemit.chat.

As above said, I found there is a Stolen Accounts Recovery. However there is no options for email recovery.

Why not let user get new password via email? If people are afraid of hacked email and attacker get the new Steemit password successful. Why not create a cool down period before sending the new password? The account can be flagged if someone / you have requested a new password. You can get a email and login message warning to cancel the new password request at anytime. That take's time but at least they can get back their valuable account.

Hopefully, I found my password!

Image URL

And yea, as l0k1 said, what if people have $1000 more in the account and missing their password? I think they really need a way out.

This may need more discussion to protect the account owner, but this seems important to everyone.

Currently,
this would be very helpful for everyone:

• Do not miss your password!
• DO backup your password in any form you can, or you may no longer get it back!
• Print it, save it to a usb drive!

(And remember where you put the password)

Thanks for viewing and thanks pfunk and l0k1 being supportive. If you like this post, plz give me a up vote. Thx!