Clarify Password Reset

PLEASE NOTE: AS OF WP 5.7, THIS PLUGIN IS NO LONGER SUPPORTED.

Since WordPress 4.3, new users are no longer sent their passwords directly by email. Instead, they are sent a message containing a link to the Reset Password page, where they can choose their own password. Additionally, the Reset Password page now appears with a strong password already suggested in the “New password” field.

This plugin removes the suggested password from the Reset Password page, leaving the “New password” field empty. Below this field it adds a “Suggest a password” button whose action is to fetch a new suggested password via Ajax.

Also since 4.3, Firefox and Chrome users may notice problems saving their new password in their browser from the Password Reset page. (Firefox saves the password with an empty username; Chrome sets the username and password to the password value.) This plugin tweaks the password reset form so that these browsers can successfully save the username and newly-reset password if the user wishes.

Note that Internet Explorer, Edge and Safari will not offer to save the password from the Password Reset page, and this plugin does not change that behaviour. Therefore, the plugin adds a configurable warning message to the Password Reset screen, advising users to make a note of their new password.

The form tweaking for Firefox/Chrome and the configurable warning message are enabled by default, but they can be disabled in the administration settings.