title: Is showing the email address in the forget password process secure?
body: <p>I have an asp.net application. In this application , I handle <code>[Forget password]</code>. When the user forgets their password I send a password-reset link through email.</p>
  
  <p>Many users complain about forgetting the email address they entered into the application. They want me to show their email address while in the <code>[Forget password]</code> section so they can check their target mail.</p>
  
  <p>Is this secure? If not how to secure it?</p>
  
  <p>My team leader advises me to only show the first letter from the email so the user can recognize his email.</p>