When looking up an account using the account lookup feature, we try our best to find a match, even when the information entered by the parent does not match what is in Avela 100%.
For example, a parent has the name "John Doe" (and an account in Avela using that name). They go through the account lookup process, using a matching address to their Avela account, but enter the name "Johnny Doe". Even though the name in Avela is different than entered, it's similar enough, and the parent will likely find their account. This doesn't just work for names - addresses entered into the account lookup form that don't match what's in Avela will often successfully find an account.
This flexibility allows us to show more parents their login information with minimal impact on security. Further, parent information is always secure, however, given the account login method (either email or phone) is always redacted. Even if a malicious actor were to successfully guess a parents name and address, they would not get access to that parents full email or phone number - just a redacted version.
If you ever find a case where the matching algorithm is too restrictive (i.e. it has a hard time finding a parent account) or permissive (i.e. it often returns incorrect results), please reach out to your Avela representative.
Comments
0 comments
Please sign in to leave a comment.