👨‍💻 A third-party vender my client uses sends out these emails. Someone there must think that forcing password resets improves security – but all they’ve really done is train their users to react based on fear-based emails, likely opening the door for REAL security issues.