Founding offer 50% off all plans for the first 100 customers, and your renewal price is locked for life. 74 spots left Claim your spot
Turquoise abstract wavy W logo on a black background
Turquoise abstract wavy W logo on a black background
White WP PowerSuite logo on a black background
White WP PowerSuite logo on a black background

Summarize with AI:

On This Page
Last updated: 24/07/2026

Disable Password Reset

Turn off public "forgot password" self-service for everyone. Use only when you reset passwords another way (manual admin password, WP-CLI, or admin-sent reset links when enabled in settings). Existing email reset links stop working while this module is on.

Overview

Turns off public “forgot password” self-service (including Woo paths), with a custom disabled message. By default admins can still trigger reset emails (allow_admin_reset_emails true). Existing email reset links stop working while the module is on. High lockout risk if you have no alternate recovery—use only on managed sites. Soft overlap with CAPTCHA reset toggles (moot when reset is off) and Magic Login as an alternate path.

Solid black square
Solid black square
Who is this for?
  • Intranet / staff-only sites
  • Agencies that reset passwords for clients
  • High-abuse open sites with a clear support process

Features

Public reset off
Blocks the lost-password flow for everyone.
Woo-aware
Covers WooCommerce lost-password UI where applicable.
Optional admin-sent resets
Keep admin-triggered reset emails when enabled (default on).
Custom message
Explain how users should get help instead.
Immediate link invalidation
Existing email reset links stop working while enabled.

Use Cases

  • Staff intranet
    No public forgot-password form; IT resets accounts.
  • Agency-managed clients
    You own recovery; clients do not self-serve resets.
  • Abuse-heavy registration sites
    Cut reset-email flooding when support handles recovery.

Frequently Asked Questions

Related Modules

Slow down password-guessing bots by locking out repeated failed logins for increasing cool-off periods—simple protection for your sign-in form.
Disabled
Allow or block visitors by IP address—ideal for office-only dashboards or shutting out known troublemakers. Rules apply site-wide, including wp-admin and login.
Disabled
Remove the dashboard screens that let anyone edit theme or plugin code from the browser—one less disaster if an account is compromised.
Disabled
Put your whole site behind one shared password—ideal for staging, client previews, or a soft launch before you go public.
Disabled
Keep a clear record of important dashboard activity—who logged in, what changed, and when—so you can investigate issues or stay audit-ready without...
Disabled
Bot protection with Cloudflare Turnstile on logins, forms, comments, and WooCommerce—low hassle for real people.
Disabled
Blocks risky default usernames during registration so bots have fewer easy targets.
Disabled
Always open your dashboard and login screen over a secure https:// link. Anyone using the old http:// address is sent to the...
Disabled
Automatically protects visible email addresses and mailto links from basic spam bots by safely encoding them while keeping them clickable for visitors.
Disabled
Two-factor login for selected roles—extra proof beyond the password.
Disabled
Founding Member Offer 74 of 100 spots left

Before you go, here's what you'd be leaving.

WP PowerSuite launched this month. The first 100 customers get 50% off and keep that renewal price permanently. When the offer closes on 31 August 2026, prices return to $79 / $239 / $399 and stay there.

  • 154 modules, all included on every plan
  • Renewal price locked for life
  • 14-day refund, one email, no questions
See founding pricing
26 founding members so far 22 days left