Plugin info

Total downloads: 27,352
Active installs: 900
Total reviews: 12
Average rating: 3.4
Support threads opened: 1
Support threads resolved: 1 (100%)
Available in: 1 language(s)
Contributors: 1
Last updated: 11/24/2025 (36 days ago)
Added to WordPress: 4/26/2013 (12 years old)
Minimum WordPress version: 2.7.0
Tested up to WordPress version: 6.8.3
Minimum PHP version: f

Maintenance & Compatibility

Maintenance score

Actively maintained • Last updated 36 days ago • Support resolved 100% • 12 reviews

73/100

Is Emergency password reset abandoned?

Likely maintained (last update 36 days ago).

Compatibility

Requires WordPress: 2.7.0
Tested up to: 6.8.3
Requires PHP: f

Languages

Similar & Alternatives

Explore plugins with similar tags, and compare key metrics like downloads, ratings, updates, support, and WP/PHP compatibility.

No similar plugins found yet.

Description

This plugin does 3 things
1) It will check you don’t have a username called “admin” which is asking to be hacked
2) It will allow you to reset all passwords, with an password reset link sent to all users to warn them.
Following a couple of reviews from v7.0 the plugin will allow you to set the email from address, name, subject and message
3) You can also change the SALTS which forces a logout of all users.

Installation

  1. Upload the emergency-password-reset directory to the /wp-content/plugins/ directory.
  2. Activate the plugin through the ‘Plugins’ menu in WordPress.
  3. Click on Emergency Password Reset in the Users menu
  4. Adjust the settings as required
  5. Click on the ‘Reset Passwords’ button

Frequently Asked Questions

How does it work?

When you click rest passwords, the plugin recreates random passwords for every user and emails them the reset password link.

Will I be secure now from a hack?

Not necessarily. We advise you change your SALTS in the wp-config.php file which will force logouts for all users. WordPress provide a tool to generate new ones.
You can now reset them automatically from the plugin Dashboard>Settings>Reset SALTs
Check out our blog post on hacked WordPress sites

Review feed

Harsh Agrawal
9/3/2016

Worked

Worked fine on my blog. Thanks
Manuel Razzari
2/24/2017

Works on MS, may crash with many users

This plugin does what it says on the tin. Works with multisite. Simply run it from the main blog in the network. Then delete it. Gotcha: it runs thorugh all users in a single request, so it may time out if your network has more than, say, 500 users.. Depending on your server env, you may not even see an error page, so you won't know which users were processed and which ones are pending.
Razorfrog Web Design
3/3/2020

Doesn't work right

See support thread - it doesn't email out a working link.

Screenshots

  1. The main and only screen!

    The main and only screen!

Changelog

9.4

  • Extra step added for resetting SALTS

9.3

  • Adjusted menu to manage_option role only (was administrator before)

9.2

  • Fix not all users password changed

9.1

  • Security audit and update

9.0

  • Check nonce for settings change to prevent CSRF

8.0

  • Emails sent in batches of 10 as BCC, to avoid crashes and email errors

7.0

  • Setttings to change email name, from and message

6.2

  • Translation ready

6.1

  • New username when changing from “admin” properly sanitized.

6.0

  • Don’t allow a user to reset admin username to empty field!

5.0

  • Added WordPress reset “salt keys” to secure your site – Dashboard>Settings>Reset SALTs

4.0

  • Updated deprecated functions

3.0

  • Updated reset link

2.0

  • Password reset link sent

1.0

  • Sends link to reset password page rather than new password

0.5

  • Form to change username from “admin”

0.4

  • Shows WP 4.0 compatability

0.3

  • Add Screenshot

0.2

  • Correct the title in readme.txt!

0.1

  • Initial release