Minding | Disable forgot password

by Minding

Description

Disables the “Lost your password?” option on the WordPress login page. In detail:

disallows password reset
removes password reset text from login page
redirects from password reset page to login page

Your users will no longer receive any password reset emails.

IMPORTANT: Before installing this plugin ensure you have other means of recovering your account!
The plugin is targeted at site administrators with access the WordPress CLI to recover accounts.

Faq

How else can I recover my account?

You can reset your password using the WordPress CLI (if you have access to it) or ask another WordPress administrator on your site to reset your password.

What is the issue with the “Lost your password?” option?

This feature allows unauthenticated entities to make WordPress send password reset emails to users. It can be abused to spam users.

Where is the plugins repository (source code, issues, pull requests, etc.)?

The source code is available on Codeberg

Reviews