manifest / security / wordpress-disable-forgot-password-plugin

Disable forgot password Codeberg

Simple Wordpress plugin to disable the "Forgot password" feature

by Paul Ohlhauser · codeberg.org/minding/wordpress-disable-forgot-password-plugin · website

★ 0stars

0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://codeberg.org/minding/wordpress-disable-forgot-password-plugin/archive/main.zip

Readme codeberg.org/minding/wordpress-disable-forgot-password-plugin ↗

Disables the \"Lost your password?\" option on the WordPress login page.

Description

Disables the \"Lost your password?\" option on the WordPress login page. In detail:

disallows password reset
removes password reset text from login page
redirects from password reset page to login page

Your users will no longer receive any password reset emails.

Before installing this plugin ensure you have other means of recovering your account! The plugin is targeted at site administrators with access the the WordPress CLI to recover accounts.

Frequently Asked Questions

Q: How else can I recover my account? A: You can reset your password using the WordPress CLI (if you have access to it) or ask another WordPress administrator on your site to reset your password. Q: What is the issue with the \"Lost your password?\" option? A: This feature allows unauthenticated entities to make WordPress send password reset emails to users. It can be abused to spam users. Q: Where is the plguins repository (source code, issues, pull requests, etc.)? A: The source code is available at: https://codeberg.org/Minding/wordpress-disable-forgot-password-plugin/