Reset password shown in plain text
-
When we hit the “Reset Password” option, we use the “send me an email” option and wait for the email. Click the link in the email and it takes us to a page where we can reset the password.
At first there is a generated password and it looks like: “xR5*RZrJDJ8m$Pkh”
There is no obfuscation. No one will be able to memorize that so they type in “myPassword!123”. Meanwhile, the guy standing there helping the new employee get started, can read this new password. That is usually not a huge deal, but it would be better if they had to option to hide/show their password.
The password DOES switch to ???????? after you click the “Reset Password” button, so the code is there, somewhere, to handle this. My problem, is that I have no clue where to find it. It looks like the majority of this is being done in external files, some (if not all) are WP files. Can this be fixed on your end, or at least post the path to the file(s) that manipulate this? (I know that sometimes the functions that manipulate these are sometimes external so that they can change languages and such)
Thank you. This plug in has saved us a lot of time.
- The topic ‘Reset password shown in plain text’ is closed to new replies.
