Forgot Password and Reset Password in MERN Stack | MERN Stack Authentication Tutorial

In this comprehensive MERN Stack tutorial, we'll dive into the implementation of "Forgot Password" and "Reset Password" functionality. Building a secure and user-friendly password recovery system is crucial for any web application, and with the MERN (MongoDB, Express.js, React, Node.js) stack, we'll achieve just that.
Complete MERN Stack Authentication and Authorization:
• Complete MERN Stack Au...
How to send Email using Node js Nodemailer:
• How to Send Email Usin...
Source Code of Forgot and Reset Password in React JS and Node JS:
codewithyousaf...
🔐 What you'll learn in this tutorial 🔐
Setting up the MERN Stack project structure
Building the user authentication system with JWT (JSON Web Tokens)
Creating the "Forgot Password" feature:
Generating and sending reset password links via email
Handling the password reset requests securely
Designing a user-friendly "Reset Password" page:
Validating the reset password token
Allowing users to reset their passwords
Securing password reset routes against common attacks (e.g., token expiration, replay attacks)
Bonus: Enhancing security with features like rate limiting and brute force protection
By the end of this tutorial, you'll have a fully functional "Forgot Password" and "Reset Password" implementation in your MERN Stack application, reinforcing your application's security while providing a seamless experience for your users.
👍 If you found this tutorial helpful, please consider giving it a thumbs up and subscribing to the channel for more MERN Stack tutorials and web development content!
🔔 Hit the notification bell to get notified whenever we release new tutorials.
📢 Share this video with your fellow developers who might find it useful.
👉🏼 Have any questions or suggestions for future tutorials? Let us know in the comments below!

[@zancrow_gaming]

God bless sir. I love how you dont hide anything from us and just show us how to to juggle the back and front together

[@gg.cip0t]

please continue this while you have extra time.. your videos are helping me alot in my learning react process and your suggestions are helpful too.

[@muneebwaqas400]

So good to see a Pakistani working in tech tutorials .Good work Keep it up @Code With Yousaf

[@nilkamalroy5375]

Nice Video and your videos are helpfully.. thanks sir

[@rishabh_pant]

Great video sir. Is it acceptable to use this or OTP is better

[@maicolaviles714]

Ey friend, really thanks, i has been learning most with this video

[@raouffilali9617]

BIG THANKS to you man i really needs it and you explain it very well thank you

[@gabrielkingori3375]

A great video indeed 👍👍

[@tharindusandaruwan2295]

Thank you so much

[@shariquefaridi5716]

Good explanation bhai❤

[@ChiruBillion]

thank u very much yousaf 💗

[@nerfedwukong.7352]

sir any alternative for "vite-plugin-rewrite-all"? im not using vite on my project just react.

[@MsSoldadoRaso]

Do not use this implementation for the following reasons: -It does not check if the user requested the password reset, allowing anyone with the token to change the password even another user's password if you have their id. -The new password is sent in plain text, which could be intercepted. -The user ID and token are visible in the URL, which can be exploited for credential theft. -Email is not validated before generating the token, which could lead to a DoS attack. that code is a great example of how not to do the password reset implementation, don't do this if your web application doesn't want to be bug bounty. :D

[@codewithyousaf]

Of course for real-life applications, you should consider security but this is for learning purposes to learn how to reset passwords, bro. Thanks for your comment.

[@debaroondebroy911]

@@codewithyousaf Savage reply for haters 😆

[@DummyTummy5545]

​@@debaroondebroy911 what savage reply? What is use of password reset other than real world implementation? Terrible tutorial

[@AlejandroLopez-di9xp]

Do you have the Git hub link to better detail the code, I would appreciate it, thank you

[@shivamshivamc7738]

Vite-plugin-rewrite-all is for only vite or react both if no than what is the react module name? Please reply

[@sharidansari2852]

thanks for shearing

[@temitopeadebunmi2200]

Bless you sir❤

[@user-es3ww3yu9u]

hello sir ! i need your help regarding this forgot password project

[@user-cm2lb6dw5k]

ha karo ne..

[@DevilJ-tc6hy]

yes sir help karo na ... please..

[@basitali2962]

Thanku u i got bug from your code

[@HridoyHazard007]

what bug ?@@basitali2962

[@cryptoworld1923]

When i reset password, in console showing err_unexpected_proxy_auth. But in postman working fine

[@hpamsc]

Hi sorry where is the complete code from login, register, forgotpassword and reset password my friend?

[@codewithyousaf]

you can find on my channel

[@devaviswa7046]

Hello yousaf , vite-plugin-rewrite-all is deprecated now , what is the alternate for the 404 error in 16:27

[@codewithyousaf]

just update vite npm i vite@latest

[@deadtome2102]

@@codewithyousaf Did that. It's still not working :(

[@codewithyousaf]

@@deadtome2102 which version of vite has been installed in your project.

[@HridoyHazard007]

how to do this if i have similar file like this "Controller, Routes, Slice " ?

[@NeerajSharma-sk2rs]

there is problem with smtp bro please suggest something for solving problem

[@madhurchaturvedi5551]

I am making login system where user have to always verify the link in email then he will login can you help to make that system how many time user can login it doesn't matter law user have to verify the link on given send on again and again

[@nerfedwukong.7352]

you didnt show what to install to use nodemailer

[@codewithyousaf]

Sorry 🙏 Just we need to install nodemailer npm i nodemailer

[@imuv21]

getting axios error

[@KhanhNguyen-ie6xj]

BRO BUT IF U DEPLOY IT HOW TF U GONNA PUT LOCALHOST LINK FOR RESETING PASSWORD, SIGH

[@codewithyousaf]

When we host it we don't need localhost we are using our domain.

[@godwinjeremiah5414]

God go bless your mama

[@user-es3ww3yu9u]

hello sir??