Hi, Could we get some testing and more "eyes" on https://core.trac.wordpress.org/changeset/11804 (for the 2.8 branch) or [11801], [11802] and [11803] for trunk. They fix an annoyance in wp-login.php where the password could be reset without the user realizing it.