How to disable the password reset request option in WordPress

Melapress Login Security allows you to disable the password reset request function. By enabling this setting, users will not be able to request a password reset. Instead, the administrator must manually reset passwords.

Security tip: This feature is especially recommended for critical website accounts, such as admin accounts. This will reduce your attack surface.

Disabling the password reset option

The password reset request function can be disabled globally (for all user accounts) or by role (for user accounts subscribed to a particular role). To enable this option;

1. Click on Login Security from the left-hand menu
2. Click on Login Policies for the piano menu
3. If you want to disable the password reset request option for all user accounts, click on the Site-wide policies tab. If you want to disable the password reset request option for a particular role, select the role from the second tab’s drop-down and disable the Inherit Password Policies option
4. Scroll to the Disable sending of password reset links setting and check the Do not send password reset links option
5. Remember to click Save Changes for the settings to take effect

Editing the request password message

You can also edit the message that will be displayed to users whenever they attempt to request a password reset.

Click on the User notification templates link and then scroll to the User requests password reset when the feature is disabled section of the templates screen. Edit the message in the Message box, and click on Save Changes to save.

Do note that when the above option is enabled, administrators are still able to send password reset links to users.