Questions tagged [password]

The tag has no usage guidance.

160 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6 votes
1 answer
371 views

How can I safely increase the character limit for post passwords?

When I want to protect a post on one of my blogs, I like to use a passphrase instead of a password (albeit purely for the sake of creativity, not security — they're stored plainly anyway). However, ...
user avatar
  • 161
3 votes
0 answers
25 views

Locking Down Wordpress Application Password Permissions / Capabilities

I am working on a Wordpress installation where we recently decoupled the frontend into a NextJS application that is no longer hosted on the same domain as the admin. We are accessing data etc through ...
user avatar
3 votes
1 answer
1k views

Add new password rule to Ultimate Member register form

I use Ultimate Member and classic form for registration. I have enabled "Strong password", but I want my users to at least fill their password with 1 special character (like "# % $ ...&...
user avatar
3 votes
0 answers
284 views

Wordpress password reset - why post rp_key?

I'm developing a plugin and after reading through wp-login.php, I can't seem to work out why some things are done the way they are. Why does WordPress hide the reset password key from the URL? After ...
user avatar
  • 88
3 votes
1 answer
3k views

Problem protecting a page with a password

As we know, there is a built-in option in WP to protect a certain page with a password. Under the general settings for the page, I choose to show it only with password and set the password accordingly....
user avatar
3 votes
0 answers
964 views

Password field (and confirmation) showing up twice on registration

Before I state my problem, I'd like to explain what I've been doing. I am trying to find a membership plugin to work with my site. I only have one registration (free membership) needed. I have been ...
user avatar
  • 73
2 votes
0 answers
241 views

How to redirect user to specific page based on the input password

I would like to ask if anyone has a ready solution for WP or recommend a plugin for password-based pages, namely: I create: a) subpage 1 and a password for it, e.g. 1234 b) subpage 2 and a password ...
user avatar
  • 21
2 votes
0 answers
43 views

How can I find users that didn't set a password?

Is it possible to find (and bulk delete) users that registered on my WordPress site but never set a password over their confirmation email?
user avatar
2 votes
1 answer
186 views

password protected post policy

I'm looking for a way to add policy about POST password. Password specifications : 12 characters in length, 1 uppercase letter, 1 lowercase letter, 1 number, and 1 special character. Is ...
user avatar
  • 284
2 votes
2 answers
2k views

Lost password link is redirecting to /shop/my-account/lost-password/

The “Lost your password?” link on the standard WordPress login screen (wp-login) links to /shop/my-account/lost-password/ instead of the WP standard (wp-login.php?action=lostpassword). My website is ...
user avatar
2 votes
1 answer
519 views

Get plain password on register

Does anybody knows how could I get the plain password (via hook) in the moment a user registers and before it is hashed? Thanks
user avatar
2 votes
2 answers
537 views

Password protected page Hash url

I am using owl carosel which takes a hash url to go to a specific slide (http://www.owlcarousel.owlgraphic.com/demos/urlhashnav.html#five) Lets say I want to visit a password protected page with the ...
user avatar
2 votes
0 answers
3k views

How to customize reset_url or $reset_url

I'm trying to change the confirmation link with key and username sent by wordpress when a user forget his password. The link looks like: /wp-login.php?action=rp&key=VZUyDIiJxJz&login=...
user avatar
  • 21
1 vote
0 answers
36 views

wp_insert_user() function password never match

I am trying to use wp_insert_user() to add a user from the custom registration form. The user gets added to the database with a hashed password, but when the user is logged out and tries to use ...
user avatar
1 vote
0 answers
112 views

Why wp_update_user doesn't update user_activation_key on users with apostrophes in their email?

Wordpress currently allows apostrophes in email addresses. However, when a user with an apostrophe in their email tries to perform a password reset, the user_activation_key is invalid. It looks as if ...
user avatar
1 vote
0 answers
34 views

Forgot Password/ Password Reset Page does not exist

I honestly don't know what happened but recently the "Forgot Password" page that you go to to reset your password (usually from an email link) no longer exists. The link that is sent by ...
user avatar
1 vote
1 answer
596 views

Use Password Protected Form without the use of wp-login.php

I need to password protect a page, but from what I looked up -- the action of the form needs to use something like this: action="' . esc_url( site_url( 'wp-login.php?action=postpass', 'login_post'...
user avatar
1 vote
2 answers
257 views

How to get user password before being encrypted outside the wordpress core once add a new user from dashboard?

I'm trying to match users' data in multiple wordpress applications, so when user created on one app the same user should be created on the other apps. Here is the problem, I need to get the new ...
user avatar
1 vote
0 answers
27 views

Adding parameters to password reset key

I'm trying to add in parameters to the url generated for password reset for a user. In this case I wanted to add a &lang parameter to determine a users selected language and set a cookie. How do I ...
user avatar
  • 113
1 vote
0 answers
20 views

Correct passwords keep appearing as incorrect

I don't know why passwords are not working... Every time a user registers on my website, their accounts are verified easily but the same passwords they use to register appear as incorrect. I have ...
user avatar
1 vote
1 answer
425 views

Preserve password hashes when migrating to another server

We have a couple hundred clients (each client is a site) and across them about 15,000 users. We are migrating from Plesk on Centos/Apache PHP 7.0.1 to AWS on Ubuntu/Nginx PHP 7.4.4. We are migrating ...
user avatar
1 vote
1 answer
35 views

Giving permission to anyone (non-users as well) with a password to edit a post, possible?

I would like to make possible to any visitors (non-users) to create a custom post from the WP frontend, then get a password in email which can let him/her edit the post if the proper password is given....
user avatar
1 vote
0 answers
351 views

wp_hash_password create a different hash everytime

I've already seen this topic: wp_hash_password unexpected behaviour And the problem is similar. I'm creating an API system where api_key and api_secret are the same as username and user_pwd. The ...
user avatar
  • 51
1 vote
1 answer
274 views

Change Password Confirmed Email Text

I've been struggling to find a hook I can use to edit the text in the password confirmed email that gets sent out when you've changed your password in WordPress. Is there anyway to do this with a ...
user avatar
  • 41
1 vote
0 answers
57 views

Custom password form allows unlock two posts with the same password

I use this custom password form in my theme: add_filter( 'the_password_form', 'custom_password_form' ); function custom_password_form() { $o = '<form action="' . esc_url( site_url( 'wp-login....
user avatar
1 vote
2 answers
43 views

How to change password

I have a blog. My computer crashed months ago, my username is admin I have tried to recover my password but as it is lost create a new one, they sent a huge long address password will not let me copy ...
user avatar
1 vote
0 answers
294 views

Reset Password policy

Looking for to add reset password policy. Password specifications : 12 characters in length, 1 uppercase letter, 1 lowercase letter, 1 number, and 1 special character. I find a hooks for manage ...
user avatar
  • 284
1 vote
0 answers
46 views

What did I do wrong in my functions code, that will not change the "Get New Password" text to "Send It"?

I am wanting to change the text "Get New Password" to "Send It" on the lost password page. The following code is what I have in my functions.php file, but it is not changing the default "Get New ...
user avatar
  • 21
1 vote
0 answers
166 views

How do I protect user_activation_key?

I was just looking the wp_users table and saw that user_activation_key is unprotected (not salted). What exactly is this column used for and how can I protect it?
user avatar
1 vote
1 answer
625 views

Custom Front End Registration - How Does the Key work in the Password Set Request?

I've been working from some tutorials on building a front end registration / login system. Specifically this link - http://cubiq.org/front-end-user-registration-and-login-in-wordpress Everything is ...
user avatar
1 vote
0 answers
116 views

Generating the password reset link automatically

I have a system sending out emails to new subscribers, and I would like to give them a link to change their password, just as if they had requested a password change. Is there any reasonably easy way ...
user avatar
1 vote
0 answers
431 views

Password protect any file in WordPress

I have found that password protection with .htaccess & .htpasswd files is the only way to protect any WordPress file. I wanted to make few of my media files accessible by specific username and ...
user avatar
1 vote
2 answers
1k views

Password protect pages - allow more than one password

I would like to password protect a page on my blog. Wordpress allows me to give one single password to each protected page. Is there a way to create more than one valid password to access that page?
user avatar
1 vote
0 answers
60 views

More Fields Required For Password protect page

There is only Password field is available for protect the page/post. I have to required more fields like: Email, User ID Number and Password. How can i add more fields in the password protected form.
user avatar
1 vote
1 answer
453 views

Deep customization of wp-login.php

I'm developing an intranet platform (so no external web access) and using the Password only login plugin. I need to make a deep customization to the wp-login.php page: the plugin i linked allows ...
user avatar
  • 117
1 vote
1 answer
575 views

Styling my own password protected page, how to deal with wrong password?

Per these instructions I've cooked up a custom password protected page for some of the pages on my site: <?php if ( post_password_required() ) { add_filter( 'the_password_form', '...
user avatar
  • 460
1 vote
1 answer
36 views

Emailing passwords: Setup installed on home server using XAMPP

I've just delved into the WP world and all in all it's going quite well. I have a server at home that I'm using to host the sites. All is working fine except the password emails are not being sent ...
user avatar
  • 151
1 vote
0 answers
375 views

Lost password empty field error redirect to custom login

I'm having trouble with a custom login/lost password form on a site I'm building. The site is completely password protected. I have a custom login page and I'm using 'wp_login_failed' and '...
user avatar
1 vote
0 answers
2k views

password recovery key is invalid on custom reset

I am trying to use a custom password recovery form instead of the default WP. The url link for resetting the password is returning 'invalid key' error. Does anyone have any help with where the problem ...
user avatar
  • 418
1 vote
0 answers
196 views

Like to store multiple passwords in db table wp_posts field post_password?

I like to have a multiple password access for a page. And i was thinking of just adding 200 passwords in post_password field but that's too simple and post_password is varchar(20). How else can i have ...
user avatar
  • 1,094
1 vote
1 answer
90 views

How to show different sub sites based on Member's user name In word press?

I have created a web site for a company with lots of sub sites using multisites in word press. These sub sites are password protected and those are for different clients. Lets say for an example :- ...
user avatar
  • 19
0 votes
0 answers
37 views

Allow Weak Passwords

a client wants to use a very specific password and i'm trying to update it in the user page. i keep getting this error, Please choose a stronger password. Use at least 12 characters, and include ...
user avatar
  • 101
0 votes
0 answers
12 views

Allow all reset password links within the past 24 hours to be valid and accepted

Right now if a user requests a reset password link (link A), then requests another reset password link (link B), link A no longer works - WordPress considers the link invalid/expired. Is there a way ...
user avatar
  • 337
0 votes
0 answers
32 views

Password protect URLs

I have a Wordpress site set up with download links that either could be set as external URLs or links to media items uploaded to Wordpress. I would like to password protect these, so clicking a ...
user avatar
  • 101
0 votes
0 answers
30 views

WooCommerce Lost Password reset goes to 404

When trying to reset password with WooCommerce lost-password it 404's. (ex. domain.com/lost-password/?reset-link-sent=true) I see that this issue has recently been reported but I was wanting to see if ...
user avatar
0 votes
0 answers
37 views

How to redirect a child page to its parent page?

In WordPress, I need to redirect a child page to its parent page. When the parent page has password protection set, the function code I have below also protects its child pages from having a different ...
user avatar
0 votes
0 answers
25 views

Authenticate user using Hashed Password in MySQL Query and C#

I am writing a custom component in C# that connects to WordPress database at backend. I am trying to authenticate users via Mysql select query but the hash is not matching. I have tried the answers ...
user avatar
  • 157
0 votes
0 answers
54 views

Sending a password reset link

I'm trying to send a password reset link to a newly created user within WordPress. However when i do this, the password reset link says it's invalid. I have the following code: public function ...
user avatar
  • 1
0 votes
0 answers
69 views

How to store API authentication password?

I am connecting a WP site to a service through the service API. The API authentication of this service is done using the service account username and password, not API keys: You send a request to the ...
user avatar
  • 356
0 votes
1 answer
60 views

Wrong activation/confirmation link in email

I've created a custom login page login.php inside the root. (e.g.: http://www.example.com/login.php) /* LOGIN PAGE. */ // Login URL. function custom_login_url($login_url, $redirect, $force_reauth ...
user avatar