0

I got someone build my WordPress site for me, but now I want to change the password. I navigated to my profile page but the change password fields for new password and re-enter password.

Is not the usual case at the bottom of the profile page

I only see higher up on the profile's page

  • Account Management
  • New Password
  • Generate Password

This is not the usual fields like I mentioned above. What do I do to change the password?

1

"Generate password" button, which you say "it is not the usual field", is the standard since WordPress 4.3. You can click it and a new password is auto generated; if you don't like it, you can modify it before saving changes and update the user data.

So, your question is basically wrong assuming that fields are not "usual"; they actually are. To change the password:

  1. Click on "Generate password".
  2. A auto-generated password will appear in a text input field.
  3. If you like it, click on "Save"/"Update profile".
  4. If you don't like it, edit the password in the text input field, then click on "Save"/"Update profile".
  5. If you modify the password and it is detected as "weak" by the system, you must check a checkbox to confirm the use of a weak password.
| improve this answer | |
0

One of the development efforts in the WordPress 4.3 cycle was improving the way that passwords are chosen and changed. Before, people had to start from scratch when choosing a password. They were presented with an empty box, and had to use a really terrible tool for generating secure passwords: the human brain.

Here’s how things look now, as we approach 4.3’s release candidate…

enter image description here

And when you click that button… enter image description here

You start out with a strong password. And if you like, you can just accept that. Most modern browsers will offer to remember it for you (as well as password managers like 1Password and LastPass). Or, you could go old school and write it on a sticky note. Hey: anything is better than choosing “letmein”!

You can, of course, click into the field and edit it. But now the password strength meter is better integrated with the field. Things start to look dire as you go your own way.

enter image description here

That red seems to signal danger. And hey, look, below. This password is SO BAD that WordPress wants to make extra sure you know you’re doing something monstrously foolhardy.

If you’re in a public location, you can hide your password, to prevent people from peeking over your shoulder.

enter image description here

This new interface is also integrated into the Add New User screen. By default, we won’t even reveal the password. We’ll just send the user a reset link.

enter image description here

But if you’re in a non-email environment or would like to pass this password to the user in a secure method such as iMessage, Signal, or TextSecure, you can reveal it…

enter image description here

The new interface can also be found on the password reset screen and the WordPress install screen. They all start you out with a long, random, unguessable password. Although WordPress isn’t stopping you from choosing terrible passwords, the default in 4.3 is that you get secure passwords, and making them less secure takes a bit of work.

In addition to this new UI, we have also stopped e-mailing passwords, so valid passwords aren’t going to sit in your e-mail inbox, waiting for some future e-mail hacker to gain access. Password reset links now expire in 24 hours by default. And when your password or e-mail changes, we send you an e-mail (in the case of e-mail, to your old address), so if someone hijacks your browser session and changes those critical items, at least you’ll be aware that it happened, and you can take action. You can disable these e-mails via the send_password_change_email and send_email_change_email filters (just have them return false).

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.