Amitkumar Dudhat

dominic_ks

<p>A simple plugin that adds a password reset facility to the WordPress REST API using a code. The process is a two step process:</p>
<ol>
<li>User requests a password reset. A code is emailed to their registered email address</li>
<li>The user enters the code when setting a new password, which is only set if the code is valid and has not expired</li>
</ol>
<p>It is also possible to check the validity of a code without resetting the password which enables the possibility of setting the password by other means, or having a two stage process for checking the code and resetting the password if desired.</p>
<p>Default settings are to use an 8 digit code consisting of numbers, upper and lower case letters and special characters, which has a life span of 15 minutes, afterwhich a new code would need to be requested. By default a user can attempt to use or validate a code up to 3 times before automatically invalidating it.</p>
<h3>Endpoints</h3>
<p>The plugin adds two new endpoints to the REST API:</p>
<ul>
<li>
<p>Endpoint: <em>/wp-json/bdpwr/v1/reset-password</em><br />
— HTTP Verb: POST<br />
— Parameters (<strong>all required</strong>):<br />
— email</p>
</li>
<li>
<p><em>/wp-json/bdpwr/v1/set-password</em><br />
— HTTP Verb: POST<br />
— Parameters (<strong>all required</strong>):<br />
— email<br />
— password<br />
— code</p>
</li>
<li>
<p><em>/wp-json/bdpwr/v1/validate-code</em><br />
— HTTP Verb: POST<br />
— Parameters (<strong>all required</strong>):<br />
— email<br />
— code</p>
</li>
</ul>
<h3>Example Requests (jQuery)</h3>
<h3>Reset Password</h3>
<pre><code>$.ajax({
  url: '/wp-json/bdpwr/v1/reset-password',
  method: 'POST',
  data: {
    email: 'example@example.com',
  },
  success: function( response ) {
    console.log( response );
  },
  error: function( response ) {
    console.log( response );
  },
});
</code></pre>
<h3>Set New Password</h3>
<pre><code>$.ajax({
  url: '/wp-json/bdpwr/v1/set-password',
  method: 'POST',
  data: {
    email: 'example@example.com',
    code: '1234',
    password: 'Pa$$word1',
  },
  success: function( response ) {
    console.log( response );
  },
  error: function( response ) {
    console.log( response );
  },
});
</code></pre>
<h3>Validate Code</h3>
<pre><code>$.ajax({
  url: '/wp-json/bdpwr/v1/validate-code',
  method: 'POST',
  data: {
    email: 'example@example.com',
    code: '1234',
  },
  success: function( response ) {
    console.log( response );
  },
  error: function( response ) {
    console.log( response );
  },
});
</code></pre>
<h3>Example Success Responses (JSON)</h3>
<h3>Reset Password</h3>
<pre><code>{
    "data": {
        "status": 200
    },
    "message": "A password reset email has been sent to your email address."
}
</code></pre>
<h3>Set New Password</h3>
<pre><code>{
    "data": {
        "status": 200
    },
    "message": "Password reset successfully."
}
</code></pre>
<h3>Validate Code</h3>
<pre><code>{
    "data": {
        "status": 200
    },
    "message": "The code supplied is valid."
}
</code></pre>
<h3>Example Error Responses (JSON)</h3>
<h3>Reset Password</h3>
<pre><code>{
    "code": "bad_email",
    "message": "No user found with this email address.",
    "data": {
        "status": 500
    }
}
</code></pre>
<h3>Set New Password</h3>
<pre><code>{
    "code": "bad_request",
    "message": "You must request a password reset code before you try to set a new password.",
    "data": {
        "status": 500
    }
}
</code></pre>
<h3>Validate Code</h3>
<pre><code>{
    "code": "bad_request",
    "message": "The reset code provided is not valid.",
    "data": {
        "status": 500
    }
}
</code></pre>
<h3>Filters</h3>
<p>A number of WordPress filters have been added to help customise the process, please feel free to request additional filters or submit a pull request with any that you required.</p>
<h3>Filter the length of the code</h3>
<pre><code>add_filter( 'bdpwr_code_length' , function( $length ) {
  return 4;
}, 10 , 1 );
</code></pre>
<h3>Filter Expiration Time</h3>
<pre><code>add_filter( 'bdpwr_code_expiration_seconds' , function( $seconds ) {
  return 900;
}, 10 , 1 );
</code></pre>
<h3>Filter the date format used by the plugin to display expiration times</h3>
<pre><code>add_filter( 'bdpwd_date_format' , function( $format ) {
  return 'H:i';
}, 10 , 1 );
</code></pre>
<h3>Filter the reset email subject</h3>
<pre><code>add_filter( 'bdpwr_code_email_subject' , function( $subject ) {
  return 'Password Reset';
}, 10 , 1 );
</code></pre>
<h3>Filter the email content</h3>
<pre><code>add_filter( 'bdpwr_code_email_text' , function( $text , $email , $code , $expiry ) {
  return $text;
}, 10 , 4 );
</code></pre>
<h3>Filter maximum attempts allowed to use a reset code, default is 3, -1 for unlimmited</h3>
<pre><code>add_filter( 'bdpwr_max_attempts' , function( $attempts ) {
  return 3;
}, 10 , 4 );
</code></pre>
<h3>Filter whether to include upper and lowercase letters in the code as well as numbers, default is false</h3>
<pre><code>add_filter( 'bdpwr_include_letters' , function( $include ) {
  return false;
}, 10 , 4 );
</code></pre>
<h3>Filter the characters to be used when generating a code, you can use any string you want, default is 0123456789</h3>
<pre><code>add_filter( 'bdpwr_selection_string' , function( $string ) {
  return '0123456789';
}, 10 , 4 );
</code></pre>
<h3>Filter the WP roles allowed to reset their password with this plugin, default is any, example below shows removing administrators</h3>
<pre><code>add_filter( 'bdpwr_allowed_roles' , function( $roles ) {

  $key = array_search( 'administrator' , $roles );

  if( $key !== false ) {
    unset( $roles[ $key ] );
  }

  return $roles;

}, 10 , 1 );
</code></pre>
<h3>Filter to add custom namespace for REST API</h3>
<pre><code>add_filter( 'bdpwr_route_namespace' , function( $route_namespace ) {
  return 'xyz/v1';
}, 10 , 1 );
</code></pre>
<h3>Credits</h3>
<ul>
<li>Plugin icon / banner image by <a href="https://unsplash.com/photos/CWL6tTDN31w" rel="nofollow ugc">Sincerely Media</a></li>
</ul>


Password Reset with Code for WordPress REST API

This is an awesome plugin. Solved some problems quickly for me

Awesome Plugin

A simple plugin that adds a password reset facility to the WordPress REST API using a code. The process is a two step process:

KrishaWeb

Dhruvang21

Manisha Makhija

Vijay Baria

<p>Managing passwords for hundreds or thousands of WordPress users can quickly become a time consuming and frustrating task. Resetting passwords manually for each user is inefficient and increases administrative overhead.</p>
<p><strong>Mass Users Password Reset</strong> solves this problem by allowing administrators to reset passwords for multiple users at once directly from the WordPress dashboard.</p>
<p>With a simple interface, administrators can filter users by role, review user details, and trigger a secure password reset for multiple accounts in just a few clicks. Once the reset is complete, affected users automatically receive an email with a secure one-time access link, letting them set a new password and log in safely.</p>
<p>This plugin is especially useful for Learning Management Systems (LMS), Membership websites, Corporate employee portals, Educational institutions, Community platforms, Multi-author blogs, and any website with large numbers of registered users.</p>
<blockquote>
<p><strong>Core Features</strong></p>
<ul>
<li><strong>Bulk Password Reset:</strong> Reset passwords for up to 100 users at once directly from the WordPress dashboard.</li>
<li><strong>Role-Based User Filtering:</strong> Quickly filter users by role such as Administrators, Customers, Subscribers, Members, and more.</li>
<li><strong>Custom Role Support:</strong> Fully compatible with custom user roles created by membership, LMS, community, and other WordPress plugins.</li>
<li><strong>Reset Password from Users Page:</strong> Reset individual users from the WordPress Users page</li>
<li><strong>Secure Password Reset Links:</strong> Send users secure one-time password reset links instead of sharing passwords in plain text.</li>
<li><strong>Automatic Email Notifications:</strong> Automatically notify users by email after the password reset process is completed.</li>
<li><strong>Test Email Functionality:</strong> Preview and test password reset emails before sending them to actual users.</li>
<li><strong>User List Overview:</strong> View user details like username, email address, display name, and role before performing reset actions.</li>
<li><strong>WordPress Multisite Support:</strong> Manage password resets across WordPress Multisite networks from a single dashboard.</li>
<li><strong>WooCommerce Compatible:</strong> Works seamlessly with WooCommerce customer and store-related user roles.</li>
<li><strong>Translation Ready:</strong> Fully translatable and compatible with multilingual WordPress websites.</li>
</ul>
<p><strong>PRO Features</strong></p>
<ul>
<li><strong>Unlimited Password Resets:</strong> No 100-user cap, reset passwords for thousands of users in a single operation, perfect for large sites, agencies, and membership platforms.</li>
<li><strong>Bulk Reset from Users Table:</strong> Perform bulk password reset actions directly from the WordPress users listing screen.</li>
<li><strong>Custom Email Templates:</strong> Customize password reset emails with your own branding, subject lines, placeholders, and messaging.</li>
<li><strong>Advanced User Filters:</strong> Filter users using advanced conditions, custom fields, user meta, registration details, and more.</li>
<li><strong>WP-CLI Support:</strong> Manage password reset operations using WP-CLI commands for automation and server-side workflows.</li>
<li><strong>Test / Sandbox Mode:</strong> Safely test password reset functionality and email delivery without affecting real users.</li>
<li><strong>Reset Link Expiration Control:</strong> Configure custom expiration time for password reset links.</li>
<li><strong>Exclude Active Reset Links:</strong> Prevent sending multiple valid reset links to the same users.</li>
<li><strong>Optimized for Large Websites:</strong> Designed to handle large user databases efficiently without performance issues.</li>
<li><strong>BuddyPress Compatible:</strong> Fully compatible with BuddyPress community websites.</li>
<li><strong>Dokan Compatible:</strong> Supports Dokan multivendor marketplace user roles and vendors.</li>
</ul>
</blockquote>
<h4>Get Mass Users Password Reset Pro on Codecanyon:</h4>
<p><a href="https://codecanyon.net/item/mass-users-password-reset-pro/20809350" rel="nofollow ugc"><strong>Download Mass Users Password Reset Pro</strong></a></p>
<p><a href="https://store.krishaweb.com/docs/mass-users-password-reset/?utm_source=readme&utm_medium=wporg&utm_campaign=MUPR" rel="nofollow ugc"><strong>Documentation</strong></a></p>
<p>Extend the plugin further with our add-ons:</p>
<p><a href="https://store.krishaweb.com/schedule-password-reset-mupr-add-on/?utm_source=readme&utm_medium=wporg&utm_campaign=MUPR" rel="nofollow ugc">Schedule Password Reset Add-On</a> — Pre-defined reset schedules, unlimited resets, and role-based scheduling.</p>
<p><a href="https://store.krishaweb.com/product/password-reset-log/?utm_source=readme&utm_medium=wporg&utm_campaign=MUPR" rel="nofollow ugc">Password Reset Log Add-On</a> — Maintain accurate logs of every password reset performed by MUPR. Available for both free and Pro versions.</p>
<h4>What Our Users Say</h4>
<blockquote>
<p><strong>Awesome plugin</strong><br />
  “it’s very useful and great plugin to reset all the users password.” ~<a href="https://wordpress.org/support/topic/awesome-plugin-3939/" rel="ugc">@ashkanram</a></p>
<p><strong>Does a really good job</strong><br />
  “Seems to do a really good job of sending out password resets for multiple users. The pro version is definitely worth paying for the extra features.” ~<a href="https://wordpress.org/support/topic/does-a-really-good-job-2/" rel="ugc">@lightwavin</a></p>
<p><strong>Very nice</strong><br />
  “This is for the Pro version, which is a very nice plugin!” ~<a href="https://wordpress.org/support/topic/very-nice-1679/" rel="ugc">@kostas45</a></p>
<p><strong>No Bugs</strong><br />
  “Installed, configured, ran reset for 1,500 users, emails delivered, done. No bugs, no weird errors, plugin just works. Sometimes that is all you need.” ~<a href="https://wordpress.org/support/topic/no-bugs-3/" rel="ugc">@vinswmy007</a></p>
</blockquote>


MASS Users Password Reset

Really such a great plugin for password reset.
also i'm use this plugin as a security purpose, I'm use the schedule password reset option to secure my store user details.

Thank you.

I'm use this security purpose

It’s a really good plugin to reset the user's password.

Easy to use


I have used this plugin in multiple sites and it makes my work much easier for user management especially if your site is compromised or hacked.


Amazing

Tired of resetting passwords one by one? Bulk reset user passwords by role and email secure one-time access links instantly.

Password Reset with Code for WordPress REST API vs MASS Users Password Reset