Justin Tadlock

<p>Prevents password reset for select users via the WordPress “lost password” form. This plugin adds a checkbox to each user’s profile in the admin. If selected, it prevents the user’s password from being reset.  If a user selects to prevent their password from being reset, no one can try to reset the password.  It stops it completely.</p>
<p>Things to keep in mind:</p>
<ul>
<li>If you lose your password, you won’t be able to reset it either unless you remove the plugin via FTP, go into the database, or have an administrator on the site change your password.</li>
<li>This plugin does not disable the ability to edit/change a password from the user profile page. It merely blocks password resetting from the “lost password” form.</li>
</ul>
<h3>Professional Support</h3>
<p>If you need professional plugin support from me, the plugin author, you can access the support forums at <a href="http://themehybrid.com/support" rel="nofollow ugc">Theme Hybrid</a>, which is a professional WordPress help/support site where I handle support for all my plugins and themes for a community of 40,000+ users (and growing).</p>
<h3>Plugin Development</h3>
<p>If you’re a theme author, plugin author, or just a code hobbyist, you can follow the development of this plugin on it’s <a href="https://github.com/justintadlock/prevent-password-reset" rel="nofollow ugc">GitHub repository</a>.</p>
<h3>Donations</h3>
<p>Yes, I do accept donations.  If you want to buy me a beer or whatever, you can do so from my <a href="http://themehybrid.com/donate" rel="nofollow ugc">donations page</a>.  I appreciate all donations, no matter the size.  Further development of this plugin is not contingent on donations, but they are always a nice incentive.</p>


Prevent Password Reset

Prevents password reset for select users via the WordPress "lost password" form.

Enrico Rossomando

<p>Whenever you try to login into your website, you can use this plugin to trasmit your password encrypted. The encryption process is done by the Chap protocol; this is particularly useful when you can’t use ssl or other kinds of secure protocols. By activating the ChapSecureLogin plugin, the only information transmitted unencrypted is the username; password is hided with a random number (nonce) generated by the session – and opportunely transformed by the SHA-256 algorithm.<br />
In the first login there will be an error, but don’t worry is only a tecnical error. Indeed in the next login’s operation, if the values are correct, there will not be errors, but you give mind because the password will sended in unencrypted way.<br />
If you want more details about this algorithm, check <a href="http://www.devarticles.com/c/a/JavaScript/Building-a-CHAP-Login-System-An-ObjectOriented-Approach/" rel="nofollow ugc">“Building a CHAP Login System”</a>.<br />
This is a zero-configuration plugin.</p>
<p>Enrico Rossomando (redsend) this is my blog about programming, gaming and startup > <a href="https://www.mrred.it/" title="Blog about programming, gaming and startup" rel="nofollow ugc">https://www.mrred.it</a></p>


Chap Secure Password Login

Do not show password, during login, on an insecure channel (without SSL). Use a SHA-256 hash algorithm.

Prevent Password Reset vs Chap Secure Password Login