Y
Hacker News
new
|
ask
|
show
|
jobs
by
pentagrama
156 days ago
I just checked, and Instagram’s password reset flow allows requesting a reset using an email address, a phone number, or even the username [1]. The username is public information, so triggering password reset emails is relatively easy.
[1]
https://www.instagram.com/accounts/password/reset/
(screenshot:
https://imgur.com/a/4x5HPLx
)