• Resolved carlarogers

    (@carlarogers)


    Usually, when I logout, wait awhile and then try logging in, I enter my username and password, verifying both are correct, click the Log in button, and the system works perfectly, informing me that my password or username are incorrect. It is absolutely beautiful, because I have done a few things to make it impossible to have submitted the incorrect username and password. So then I click the forgot password link, open email, click the password reset link contained therein, which takes me to a form on my site for resetting the password. I replace the suggested password with the one I have been using since installing WordPress, it gives me a notice saying the password is changed. Then I click on the link to bring up the login screen (prompting me to wonder why changing the password does not log me in as part of the process of changing the password, assuming there is a security best practice demamding that WordPress could never login at the end of the password change process, about which I wonder and cannot resist doubting the need), enter the same username and password that had not been working and just like that, I am logged in.

    What can I do to prevent being forced to change my password in order to login?

    My personal preference is to always be forced to change my password, but some of the people I work for have requested I eliminate that step, except for any and all use cases involved in the response to losing a password. In those cases, changing the password is considered within my user community to be a net positive, at least until I can provide them an application that prevents users from forgetting their passwords.

    Bottom line, is there anything I can do to prevent the system from forcing a password change, and if so, what is it?

    • This topic was modified 4 years, 4 months ago by carlarogers.

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Thread Starter carlarogers

    (@carlarogers)

    I forgot to mention, searching the internet with my favorite search engine, I found without evidence rumors to the effect of “have you tried clearing your cache?

    still typing…

    done with typing now. I was away for moment, during which I went to the login page for my wordpress installationio, then firmly, sharply, but not so fast as to have produced ambiguous or missed key taps, I made the WordPress login page on my site at this url:

    held down the CMD and shift keys of the keyboard connected to my computer, which is a MAC-from-Apple type of computer, running Firefox version 82.0.1, which I have reason to believe is considered a current. I promise further I will apply any WordPress updates available as soon as I complete logging in, hopefully, sometime before 6:00 am when the sun is scheduled to appear out my window. While holding down the CMD and SHIFT keys on the left side of my keyboard which contains CMD and SHIFT keys on the right side as well, using my other hand (not the one where my thumb and index finger were still holding down CMD and SHIFT, I tapped the R key (which I am able to recall with near certainty. due to the special relationship I use in my mind to remember that R is for Refresh). many of the rumors I have seen are based on claims that holding down SHIFT and CMD while then striking R (for Refresh), while the departure will likely be invisible, the expectation is that three-key maneuver will Refresh a web page and while doing so, all its cache will be hurled from the computers’ Cache reserve,

    Based on that, I am able to represent to you with 100% honesty and candor, I cleared the cache for the webpage or possibly whole domain, but definitely the webpage for logging into my wordpress, which is at this link

    • This reply was modified 4 years, 4 months ago by carlarogers.
Viewing 1 replies (of 1 total)
  • The topic ‘Admin Login Fails Only After Time Has Passed Since Logging Out’ is closed to new replies.