Amitkumar Dudhat

dominic_ks

<p>A simple plugin that adds a password reset facility to the WordPress REST API using a code. The process is a two step process:</p>
<ol>
<li>User requests a password reset. A code is emailed to their registered email address</li>
<li>The user enters the code when setting a new password, which is only set if the code is valid and has not expired</li>
</ol>
<p>It is also possible to check the validity of a code without resetting the password which enables the possibility of setting the password by other means, or having a two stage process for checking the code and resetting the password if desired.</p>
<p>Default settings are to use an 8 digit code consisting of numbers, upper and lower case letters and special characters, which has a life span of 15 minutes, afterwhich a new code would need to be requested. By default a user can attempt to use or validate a code up to 3 times before automatically invalidating it.</p>
<h3>Endpoints</h3>
<p>The plugin adds two new endpoints to the REST API:</p>
<ul>
<li>
<p>Endpoint: <em>/wp-json/bdpwr/v1/reset-password</em><br />
— HTTP Verb: POST<br />
— Parameters (<strong>all required</strong>):<br />
— email</p>
</li>
<li>
<p><em>/wp-json/bdpwr/v1/set-password</em><br />
— HTTP Verb: POST<br />
— Parameters (<strong>all required</strong>):<br />
— email<br />
— password<br />
— code</p>
</li>
<li>
<p><em>/wp-json/bdpwr/v1/validate-code</em><br />
— HTTP Verb: POST<br />
— Parameters (<strong>all required</strong>):<br />
— email<br />
— code</p>
</li>
</ul>
<h3>Example Requests (jQuery)</h3>
<h3>Reset Password</h3>
<pre><code>$.ajax({
  url: '/wp-json/bdpwr/v1/reset-password',
  method: 'POST',
  data: {
    email: 'example@example.com',
  },
  success: function( response ) {
    console.log( response );
  },
  error: function( response ) {
    console.log( response );
  },
});
</code></pre>
<h3>Set New Password</h3>
<pre><code>$.ajax({
  url: '/wp-json/bdpwr/v1/set-password',
  method: 'POST',
  data: {
    email: 'example@example.com',
    code: '1234',
    password: 'Pa$$word1',
  },
  success: function( response ) {
    console.log( response );
  },
  error: function( response ) {
    console.log( response );
  },
});
</code></pre>
<h3>Validate Code</h3>
<pre><code>$.ajax({
  url: '/wp-json/bdpwr/v1/validate-code',
  method: 'POST',
  data: {
    email: 'example@example.com',
    code: '1234',
  },
  success: function( response ) {
    console.log( response );
  },
  error: function( response ) {
    console.log( response );
  },
});
</code></pre>
<h3>Example Success Responses (JSON)</h3>
<h3>Reset Password</h3>
<pre><code>{
    "data": {
        "status": 200
    },
    "message": "A password reset email has been sent to your email address."
}
</code></pre>
<h3>Set New Password</h3>
<pre><code>{
    "data": {
        "status": 200
    },
    "message": "Password reset successfully."
}
</code></pre>
<h3>Validate Code</h3>
<pre><code>{
    "data": {
        "status": 200
    },
    "message": "The code supplied is valid."
}
</code></pre>
<h3>Example Error Responses (JSON)</h3>
<h3>Reset Password</h3>
<pre><code>{
    "code": "bad_email",
    "message": "No user found with this email address.",
    "data": {
        "status": 500
    }
}
</code></pre>
<h3>Set New Password</h3>
<pre><code>{
    "code": "bad_request",
    "message": "You must request a password reset code before you try to set a new password.",
    "data": {
        "status": 500
    }
}
</code></pre>
<h3>Validate Code</h3>
<pre><code>{
    "code": "bad_request",
    "message": "The reset code provided is not valid.",
    "data": {
        "status": 500
    }
}
</code></pre>
<h3>Filters</h3>
<p>A number of WordPress filters have been added to help customise the process, please feel free to request additional filters or submit a pull request with any that you required.</p>
<h3>Filter the length of the code</h3>
<pre><code>add_filter( 'bdpwr_code_length' , function( $length ) {
  return 4;
}, 10 , 1 );
</code></pre>
<h3>Filter Expiration Time</h3>
<pre><code>add_filter( 'bdpwr_code_expiration_seconds' , function( $seconds ) {
  return 900;
}, 10 , 1 );
</code></pre>
<h3>Filter the date format used by the plugin to display expiration times</h3>
<pre><code>add_filter( 'bdpwd_date_format' , function( $format ) {
  return 'H:i';
}, 10 , 1 );
</code></pre>
<h3>Filter the reset email subject</h3>
<pre><code>add_filter( 'bdpwr_code_email_subject' , function( $subject ) {
  return 'Password Reset';
}, 10 , 1 );
</code></pre>
<h3>Filter the email content</h3>
<pre><code>add_filter( 'bdpwr_code_email_text' , function( $text , $email , $code , $expiry ) {
  return $text;
}, 10 , 4 );
</code></pre>
<h3>Filter maximum attempts allowed to use a reset code, default is 3, -1 for unlimmited</h3>
<pre><code>add_filter( 'bdpwr_max_attempts' , function( $attempts ) {
  return 3;
}, 10 , 4 );
</code></pre>
<h3>Filter whether to include upper and lowercase letters in the code as well as numbers, default is false</h3>
<pre><code>add_filter( 'bdpwr_include_letters' , function( $include ) {
  return false;
}, 10 , 4 );
</code></pre>
<h3>Filter the characters to be used when generating a code, you can use any string you want, default is 0123456789</h3>
<pre><code>add_filter( 'bdpwr_selection_string' , function( $string ) {
  return '0123456789';
}, 10 , 4 );
</code></pre>
<h3>Filter the WP roles allowed to reset their password with this plugin, default is any, example below shows removing administrators</h3>
<pre><code>add_filter( 'bdpwr_allowed_roles' , function( $roles ) {

  $key = array_search( 'administrator' , $roles );

  if( $key !== false ) {
    unset( $roles[ $key ] );
  }

  return $roles;

}, 10 , 1 );
</code></pre>
<h3>Filter to add custom namespace for REST API</h3>
<pre><code>add_filter( 'bdpwr_route_namespace' , function( $route_namespace ) {
  return 'xyz/v1';
}, 10 , 1 );
</code></pre>
<h3>Credits</h3>
<ul>
<li>Plugin icon / banner image by <a href="https://unsplash.com/photos/CWL6tTDN31w" rel="nofollow ugc">Sincerely Media</a></li>
</ul>


Password Reset with Code for WordPress REST API

This is an awesome plugin. Solved some problems quickly for me

Awesome Plugin

A simple plugin that adds a password reset facility to the WordPress REST API using a code. The process is a two step process:

KrishaWeb

Dhruvang21

Manisha Makhija

Vijay Baria

<p>Managing passwords for hundreds or thousands of WordPress users can quickly become a time-consuming and frustrating task. Resetting passwords manually for each user is inefficient and increases administrative overhead.</p>
<p><strong>Mass Users Password Reset</strong> solves this problem by allowing administrators to reset passwords for multiple users at once directly from the WordPress dashboard.</p>
<p>With a simple interface, administrators can filter users by role, review user details, and generate new secure passwords for multiple accounts in just a few clicks.</p>
<p>Once the reset process is complete, affected users automatically receive an email containing their new password so they can log in immediately.</p>
<p>This plugin is especially useful for Learning Management Systems (LMS), Membership websites, Corporate employee portals, Educational institutions, Community platforms, Multi-author blogs, Websites with large numbers of registered users. Whenever you need to enforce password changes across many users, this plugin helps you do it quickly and securely.</p>
<h3>Features</h3>
<ul>
<li>Bulk Password Reset: Reset passwords for multiple users at once instead of manually updating each account.</li>
<li>Role-Based User Filtering: Filter users by role to target specific groups for password resets.</li>
<li>Support for Custom User Roles: Works with custom roles created by membership plugins, LMS systems, or other user management tools.</li>
<li>Secure Auto-Generated Passwords: Automatically generates secure random passwords for selected users.</li>
<li>Email Notification to Users: Users receive an email notification containing their newly generated password after the reset process is completed.</li>
<li>User List Overview: View user details such as username, name, and email address before performing password reset operations.</li>
<li>Simple Admin Interface: Easy-to-use interface integrated directly within the WordPress admin dashboard.</li>
<li>Multilingual Support: Fully translatable with support for multiple languages.</li>
<li>WooCommerce Compatible: Works with WooCommerce user roles.</li>
<li>Free Support: Get help with any issues or questions you may have.</li>
</ul>
<h3>Free Version Limitations</h3>
<p>The free version includes core functionality but has some limitations designed for smaller websites.</p>
<ul>
<li>Maximum 100 users per reset operation</li>
<li>New secure passwords are sent via email</li>
<li>Secure reset link / OTP reset not available</li>
<li>WP-CLI support not available</li>
<li>Sandbox / test mode not available</li>
<li>Email template customization not available</li>
<li>Multisite support not available</li>
<li>Limited advanced filtering options</li>
<li>WooCommerce compatible custom roles not supported</li>
</ul>
<h3>Pro Features</h3>
<ul>
<li>Unlimited Password Resets: Reset passwords for unlimited users in a single operation.</li>
<li>Secure Password Reset Links: Send secure password reset links instead of plain passwords in emails.</li>
<li>Reset Password from Users Page: Reset passwords for individual users directly from the WordPress Users page.</li>
<li>Bulk Reset from Users Table: Perform bulk password resets directly from the users table.</li>
<li>Custom Email Templates: Customize the email notifications sent to users after password resets.</li>
<li>Advanced User Filtering: Filter users using additional parameters such as metadata or custom fields.</li>
<li>WP-CLI Support: Run password reset operations using WP-CLI, ideal for automation and server-level operations.</li>
<li>Test / Sandbox Mode: Test the reset process before executing it on live users.</li>
<li>Optimized for Large Websites: Improved performance when handling thousands of users.</li>
<li>WooCommerce Compatible Custom Roles: Works with WooCommerce custom roles.</li>
</ul>
<p><a href="https://store.krishaweb.com/docs/mass-users-password-reset/?utm_source=readme&utm_medium=wporg&utm_campaign=MUPR" rel="nofollow ugc">Documentation</a><br />
<a href="https://codecanyon.net/item/mass-users-password-reset-pro/20809350" rel="nofollow ugc">Download the Mass Users Password Reset Pro</a></p>
<h3>Free vs Pro: What You Gain with the Upgrade</h3>
<p>While the Free version gives you the basics auto-password generation Pro unlocks essential tools if you run heavy sites or care about customized workflows. Pro adds email template editing, advanced user filters, reset-link expiration, test/sandbox modes, and the ability to exclude users already having valid reset links. If you manage a WooCommerce store, BuddyPress community, Dokan marketplace, or large multisite network, Pro pays for itself in time savings, peace of mind, and fewer support headaches.</p>
<p><a href="https://store.krishaweb.com/schedule-password-reset-mupr-add-on/?utm_source=readme&utm_medium=wporg&utm_campaign=MUPR" rel="nofollow ugc">Get Schedule Password Reset Add On</a></p>
<ul>
<li>Pre-defined password reset schedule</li>
<li>Unlimited password reset</li>
<li>Role based schedule option</li>
</ul>
<p><a href="https://store.krishaweb.com/product/password-reset-log/?utm_source=readme&utm_medium=wporg&utm_campaign=MUPR" rel="nofollow ugc">Get Password Reset Log Add On</a></p>
<ul>
<li>Maintain the password reset log reset by MUPR plugin</li>
<li>Accurate user password reset log</li>
<li>Available for MUPR and MUPR Pro</li>
</ul>
<h3>Our Customer Says:</h3>
<blockquote>
<p><strong>Awesome plugin</strong><br />
  “it’s very useful and great plugin to reset all the users password.” ~<a href="https://wordpress.org/support/topic/awesome-plugin-3939/" rel="ugc">@ashkanram</a></p>
<p><strong>Does a really good job</strong><br />
  “Seems to do a really good job of sending out password resets for multiple users. The pro version is definitely worth paying for the extra features.” ~<a href="https://wordpress.org/support/topic/does-a-really-good-job-2/" rel="ugc">@lightwavin</a></p>
</blockquote>
<blockquote>
<p><strong>Very nice</strong><br />
  “This is for the Pro version, which is a very nice plugin!” ~<a href="https://wordpress.org/support/topic/very-nice-1679/" rel="ugc">@kostas45</a></p>
</blockquote>


MASS Users Password Reset

Really such a great plugin for password reset.
also i'm use this plugin as a security purpose, I'm use the schedule password reset option to secure my store user details.

Thank you.

I'm use this security purpose

It’s a really good plugin to reset the user's password.

Easy to use

Reset passwords for multiple WordPress users at once. Filter users by role and send new passwords via email.

Password Reset with Code for WordPress REST API vs MASS Users Password Reset