Questions tagged [password]
The password tag has no usage guidance.
160
questions with no upvoted or accepted answers
6
votes
1
answer
371
views
How can I safely increase the character limit for post passwords?
When I want to protect a post on one of my blogs, I like to use a passphrase instead of a password (albeit purely for the sake of creativity, not security — they're stored plainly anyway). However, ...
- 161
3
votes
0
answers
25
views
Locking Down Wordpress Application Password Permissions / Capabilities
I am working on a Wordpress installation where we recently decoupled the frontend into a NextJS application that is no longer hosted on the same domain as the admin. We are accessing data etc through ...
3
votes
1
answer
1k
views
Add new password rule to Ultimate Member register form
I use Ultimate Member and classic form for registration.
I have enabled "Strong password", but I want my users to at least fill their password with 1 special character (like "# % $ ...&...
- 205
3
votes
0
answers
284
views
Wordpress password reset - why post rp_key?
I'm developing a plugin and after reading through wp-login.php, I can't seem to work out why some things are done the way they are.
Why does WordPress hide the reset password key from the URL?
After ...
- 88
3
votes
1
answer
3k
views
Problem protecting a page with a password
As we know, there is a built-in option in WP to protect a certain page with a password. Under the general settings for the page, I choose to show it only with password and set the password accordingly....
- 159
3
votes
0
answers
964
views
Password field (and confirmation) showing up twice on registration
Before I state my problem, I'd like to explain what I've been doing. I am trying to find a membership plugin to work with my site. I only have one registration (free membership) needed. I have been ...
- 73
2
votes
0
answers
241
views
How to redirect user to specific page based on the input password
I would like to ask if anyone has a ready solution for WP or recommend a plugin for password-based pages, namely:
I create:
a) subpage 1 and a password for it, e.g. 1234
b) subpage 2 and a password ...
- 21
2
votes
0
answers
43
views
How can I find users that didn't set a password?
Is it possible to find (and bulk delete) users that registered on my WordPress site but never set a password over their confirmation email?
- 149
2
votes
1
answer
186
views
password protected post policy
I'm looking for a way to add policy about POST password.
Password specifications :
12 characters in length, 1 uppercase letter, 1 lowercase letter, 1 number, and 1 special character.
Is ...
- 284
2
votes
2
answers
2k
views
Lost password link is redirecting to /shop/my-account/lost-password/
The “Lost your password?” link on the standard WordPress login screen (wp-login) links to /shop/my-account/lost-password/ instead of the WP standard (wp-login.php?action=lostpassword). My website is ...
- 21
2
votes
1
answer
519
views
Get plain password on register
Does anybody knows how could I get the plain password (via hook) in the moment a user registers and before it is hashed?
Thanks
- 121
2
votes
2
answers
537
views
Password protected page Hash url
I am using owl carosel which takes a hash url to go to a specific slide (http://www.owlcarousel.owlgraphic.com/demos/urlhashnav.html#five)
Lets say I want to visit a password protected page with the ...
- 157
2
votes
0
answers
3k
views
How to customize reset_url or $reset_url
I'm trying to change the confirmation link with key and username sent by wordpress when a user forget his password. The link looks like:
/wp-login.php?action=rp&key=VZUyDIiJxJz&login=...
- 21
1
vote
0
answers
36
views
wp_insert_user() function password never match
I am trying to use wp_insert_user() to add a user from the custom registration form.
The user gets added to the database with a hashed password, but when the user is logged out and tries to use ...
- 233
1
vote
0
answers
112
views
Why wp_update_user doesn't update user_activation_key on users with apostrophes in their email?
Wordpress currently allows apostrophes in email addresses. However, when a user with an apostrophe in their email tries to perform a password reset, the user_activation_key is invalid.
It looks as if ...
- 11
1
vote
0
answers
34
views
Forgot Password/ Password Reset Page does not exist
I honestly don't know what happened but recently the "Forgot Password" page that you go to to reset your password (usually from an email link) no longer exists.
The link that is sent by ...
- 11
1
vote
1
answer
596
views
Use Password Protected Form without the use of wp-login.php
I need to password protect a page, but from what I looked up -- the action of the form needs to use something like this:
action="' . esc_url( site_url( 'wp-login.php?action=postpass', 'login_post'...
- 11
1
vote
2
answers
257
views
How to get user password before being encrypted outside the wordpress core once add a new user from dashboard?
I'm trying to match users' data in multiple wordpress applications, so when user created on one app the same user should be created on the other apps.
Here is the problem, I need to get the new ...
- 21
1
vote
0
answers
27
views
Adding parameters to password reset key
I'm trying to add in parameters to the url generated for password reset for a user.
In this case I wanted to add a &lang parameter to determine a users selected language and set a cookie.
How do I ...
- 113
1
vote
0
answers
20
views
Correct passwords keep appearing as incorrect
I don't know why passwords are not working... Every time a user registers on my website, their accounts are verified easily but the same passwords they use to register appear as incorrect.
I have ...
- 11
1
vote
1
answer
425
views
Preserve password hashes when migrating to another server
We have a couple hundred clients (each client is a site) and across them about 15,000 users. We are migrating from Plesk on Centos/Apache PHP 7.0.1 to AWS on Ubuntu/Nginx PHP 7.4.4.
We are migrating ...
1
vote
1
answer
35
views
Giving permission to anyone (non-users as well) with a password to edit a post, possible?
I would like to make possible to any visitors (non-users) to create a custom post from the WP frontend, then get a password in email which can let him/her edit the post if the proper password is given....
- 154
1
vote
0
answers
351
views
wp_hash_password create a different hash everytime
I've already seen this topic: wp_hash_password unexpected behaviour
And the problem is similar.
I'm creating an API system where api_key and api_secret are the same as username and user_pwd. The ...
- 51
1
vote
1
answer
274
views
Change Password Confirmed Email Text
I've been struggling to find a hook I can use to edit the text in the password confirmed email that gets sent out when you've changed your password in WordPress.
Is there anyway to do this with a ...
- 41
1
vote
0
answers
57
views
Custom password form allows unlock two posts with the same password
I use this custom password form in my theme:
add_filter( 'the_password_form', 'custom_password_form' );
function custom_password_form() {
$o = '<form action="' . esc_url( site_url( 'wp-login....
1
vote
2
answers
43
views
How to change password
I have a blog. My computer crashed months ago, my username is admin I have tried to recover my password but as it is lost create a new one, they sent a huge long address password will not let me copy ...
1
vote
0
answers
294
views
Reset Password policy
Looking for to add reset password policy.
Password specifications :
12 characters in length, 1 uppercase letter, 1 lowercase letter, 1 number, and 1 special character.
I find a hooks for manage ...
- 284
1
vote
0
answers
46
views
What did I do wrong in my functions code, that will not change the "Get New Password" text to "Send It"?
I am wanting to change the text "Get New Password" to "Send It" on the lost password page. The following code is what I have in my functions.php file, but it is not changing the default "Get New ...
- 21
1
vote
0
answers
166
views
How do I protect user_activation_key?
I was just looking the wp_users table and saw that user_activation_key is unprotected (not salted). What exactly is this column used for and how can I protect it?
- 11
1
vote
1
answer
625
views
Custom Front End Registration - How Does the Key work in the Password Set Request?
I've been working from some tutorials on building a front end registration / login system. Specifically this link - http://cubiq.org/front-end-user-registration-and-login-in-wordpress
Everything is ...
- 11
1
vote
0
answers
116
views
Generating the password reset link automatically
I have a system sending out emails to new subscribers, and I would like to give them a link to change their password, just as if they had requested a password change.
Is there any reasonably easy way ...
- 11
1
vote
0
answers
431
views
Password protect any file in WordPress
I have found that password protection with .htaccess & .htpasswd files is the only way to protect any WordPress file.
I wanted to make few of my media files accessible by specific username and ...
1
vote
2
answers
1k
views
Password protect pages - allow more than one password
I would like to password protect a page on my blog. Wordpress allows me to give one single password to each protected page. Is there a way to create more than one valid password to access that page?
- 131
1
vote
0
answers
60
views
More Fields Required For Password protect page
There is only Password field is available for protect the page/post. I have to required more fields like: Email, User ID Number and Password. How can i add more fields in the password protected form.
- 11
1
vote
1
answer
453
views
Deep customization of wp-login.php
I'm developing an intranet platform (so no external web access) and using the Password only login plugin.
I need to make a deep customization to the wp-login.php page:
the plugin i linked allows ...
- 117
1
vote
1
answer
575
views
Styling my own password protected page, how to deal with wrong password?
Per these instructions I've cooked up a custom password protected page for some of the pages on my site:
<?php if ( post_password_required() ) {
add_filter( 'the_password_form', '...
- 460
1
vote
1
answer
36
views
Emailing passwords: Setup installed on home server using XAMPP
I've just delved into the WP world and all in all it's going quite well. I have a server at home that I'm using to host the sites. All is working fine except the password emails are not being sent ...
- 151
1
vote
0
answers
375
views
Lost password empty field error redirect to custom login
I'm having trouble with a custom login/lost password form on a site I'm building. The site is completely password protected. I have a custom login page and I'm using 'wp_login_failed' and '...
1
vote
0
answers
2k
views
password recovery key is invalid on custom reset
I am trying to use a custom password recovery form instead of the default WP. The url link for resetting the password is returning 'invalid key' error. Does anyone have any help with where the problem ...
- 418
1
vote
0
answers
196
views
Like to store multiple passwords in db table wp_posts field post_password?
I like to have a multiple password access for a page. And i was thinking of just adding 200 passwords in post_password field but that's too simple and post_password is varchar(20). How else can i have ...
- 1,094
1
vote
1
answer
90
views
How to show different sub sites based on Member's user name In word press?
I have created a web site for a company with lots of sub sites using multisites in word press. These sub sites are password protected and those are for different clients.
Lets say for an example :- ...
- 19
0
votes
0
answers
37
views
Allow Weak Passwords
a client wants to use a very specific password and i'm trying to update it in the user page. i keep getting this error,
Please choose a stronger password. Use at least 12 characters, and include ...
- 101
0
votes
0
answers
12
views
Allow all reset password links within the past 24 hours to be valid and accepted
Right now if a user requests a reset password link (link A), then requests another reset password link (link B), link A no longer works - WordPress considers the link invalid/expired.
Is there a way ...
- 337
0
votes
0
answers
32
views
Password protect URLs
I have a Wordpress site set up with download links that either could be set as external URLs or links to media items uploaded to Wordpress. I would like to password protect these, so clicking a ...
- 101
0
votes
0
answers
30
views
WooCommerce Lost Password reset goes to 404
When trying to reset password with WooCommerce lost-password it 404's.
(ex. domain.com/lost-password/?reset-link-sent=true)
I see that this issue has recently been reported but I was wanting to see if ...
0
votes
0
answers
37
views
How to redirect a child page to its parent page?
In WordPress, I need to redirect a child page to its parent page. When the parent page has password protection set, the function code I have below also protects its child pages from having a different ...
0
votes
0
answers
25
views
Authenticate user using Hashed Password in MySQL Query and C#
I am writing a custom component in C# that connects to WordPress database at backend. I am trying to authenticate users via Mysql select query but the hash is not matching. I have tried the answers ...
- 157
0
votes
0
answers
54
views
Sending a password reset link
I'm trying to send a password reset link to a newly created user within WordPress. However when i do this, the password reset link says it's invalid. I have the following code:
public function ...
- 1
0
votes
0
answers
69
views
How to store API authentication password?
I am connecting a WP site to a service through the service API.
The API authentication of this service is done using the service account username and password, not API keys:
You send a request to the ...
- 356
0
votes
1
answer
60
views
Wrong activation/confirmation link in email
I've created a custom login page login.php inside the root. (e.g.: http://www.example.com/login.php)
/*
LOGIN PAGE.
*/
// Login URL.
function custom_login_url($login_url, $redirect, $force_reauth ...
