Improve customer privacy by not indicating if email is associated with account

Hi @clonemykey,

It’s been a while since you posted, so you may have found a solution for this. If not, try this snippet in your theme’s functions.php file or with the Code Snippets plugin.

function ijab_password_reset_message($allow, $user_id){

   return new WP_Error('invalidcombo', __('If this email address has an account with us a reset password will be sent.'));

}
add_filter( 'lostpassword_errors', 'ijab_password_reset_message', 99, 2 );

Let me know if you have any questions or trouble.

Awesome, this works! Do you of a filter to change the “Password reset email has been sent.” message that gets generated for users who have accounts? Ideally, we’d like these to be the same message.

Hello @clonemykey,

You can use the below filter:

apply_filters( 'woocommerce_lost_password_confirmation_message', esc_html__( 'A password reset email has been sent to the email address on file for your account, but may take several minutes to show up in your inbox. Please wait at least 10 minutes before attempting another reset.', 'woocommerce' ) )

Here is the file location: /woocommerce/templates/myaccount/lost-password-confirmation.php

Thanks!

Hey there!

We haven’t heard back from you in a while, so I’m going to mark this as resolved – if you have any further questions, you can start a new thread.

Thanks!