Deploying an automatic password reset in the wake of a cyberattack, a move Yahoo has so far avoided, may wind up locking users out of their email accounts, online security experts say.
