[wp-trac] [WordPress Trac] #34281: Allow admins to send users a 'Reset Password' link

WordPress Trac noreply at wordpress.org
Wed Nov 11 07:29:30 UTC 2015


#34281: Allow admins to send users a 'Reset Password' link
-------------------------------------------------+-------------------------
 Reporter:  Ipstenu                              |       Owner:
     Type:  enhancement                          |  adamsilverstein
 Priority:  normal                               |      Status:  assigned
Component:  Users                                |   Milestone:  4.4
 Severity:  normal                               |     Version:  trunk
 Keywords:  has-patch needs-testing has-         |  Resolution:
  screenshots needs-refresh                      |     Focuses:  javascript
-------------------------------------------------+-------------------------

Comment (by knutsp):

 Pre 4.3, when a new password was requested, it was sent by email. When
 administrators wanted to change the password of a user, they usually
 emailed it.

 As of 4.3 we discourage sending passwords by email by introducing a
 password reset link. This is about hardening WordPress security.

 Still, if an admin wants to enable the user to log in after lost password,
 the old practice of sending a new password by email, manually, may
 persist.

 Even if this could become a nice plugin, making the life of an
 administrator easier, it could also bee seen as part of a security
 hardening, following up the password changes in 4.3.

 I think it goes along with the ability to log out of other sessions. That
 could also have been a plugin.

 Apart from being nice and handy, I think it's an important enhancement.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34281#comment:30>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list