A secure way that works with still valid and read email addresses would be if at the user page a password-protected (with that user's password) link “I forgot my email” would send some standard email to the email address. That way nobody else can get at the email (you have to have read access to the email to figure out what it is), and the password protection means no one can use it to spam you. Of course that won't help if you used a throw-away email address.

celtschk‭ For that to work, would it not require that you'd know which email account to check? In which case you either know the email address already (so no need to "recover" it), or the set of possible addresses is small enough that you can easily check them all (in which case why not just try to log in using them, one at a time)? Especially if it's protected by that user's own password.

Seems to me the only scenario for which that would help is if you have a large number of forwarding addresses, all of them forwarding to a central account, and you used a forwarding address for Codidact but forgot which one but still remember your Codidact password. I doubt that's a common use case.

Canina‭ Do people really have so many email accounts that checking all of them is hard? On the other hand having several email addresses to the same account is not that uncommon. In particular, some providers allow you to stick some almost arbitrary stuff at the end of your user name to get an essentially unique email address. Forgetting which arbitrary stuff you appended for that specific account for me is the most plausible reason of why you would forget your email address.

Anyway, I don't have a problem with the claim “not worth the effort”. I only object to the claim “not possible”.

I think if I mail support at codidact.com than they might show me first few characters and last few characters. Then, that person maybe find out that email.