Questions tagged [password]

The tag has no usage guidance.

1
vote
1answer
16 views

Move users with Feed Me

Is it possible to move users along with their passwords? I can see the mapping option, but how do I output password in a template (I'm moving data between craft installations). The below code does ...
0
votes
1answer
28 views

Password Reset via SMS

Is it possible to send the Password reset email via SMS instead of email? I'm signing users up using their mobiles and a 6 digit pin + a randomly generated email.
2
votes
1answer
66 views

Auto login user after password reset via a plugin in Craft3

Unlike in Craft2, there doesn't seem to be a way in Craft3 for a plugin to automatically login a user after a password reset. In Craft2, a plugin could listen for users.onSetPassword to determine ...
2
votes
1answer
70 views

Locked out of my Account, how to get back in?

This really stressing me out! When trying to log back in to Craft CMS today after som time my password wouldn´t work. I have not changed it and when trying to reset the password I´m only getting: "...
1
vote
2answers
92 views

Frontend form to change Craft Commerce user's password?

I'm trying to modify Craft 3's example 'Change password' form to work with a logged in Commerce 2 user, and have copied that code to templates/setpassword.twig. Two problems... (1) The {{ code }} ...
1
vote
1answer
50 views

Craft 3 setPasswordPath config not working for front end users

How do I change the link that's sent in a forgot password email that's sent to front end users in Craft 3? The setPasswordPath config isn't working for me. The users don't have access to the CP. In ...
1
vote
1answer
70 views

Craft 3 validate new password in change password

I'm trying to validate user's new password and confirm password in my custom plugin init(). Event::on(User::class, User::EVENT_BEFORE_SAVE, function(Event $event) { $formData = $_POST; $...
0
votes
1answer
34 views

Set Password on Test User Account in Localhost

I'm trying to set the password for a 'test' user account on my localhost test site. I don't have an email server to send the reset emails, so I've been using the copy URL method. When I do go to the ...
1
vote
1answer
30 views

Possible to set Forgotten Password path in config?

Looking at the documentation here: https://docs.craftcms.com/v2/config-settings.html#users I have set loginPath, invalidUserTokenPath and setPasswordPath. However, it appears that there isn't a ...
0
votes
0answers
100 views

Craft 3: Custom “Set Password Form” not working

I'm trying to make a custom page for setting a new password. I found the following in the docs: https://docs.craftcms.com/v3/dev/examples/set-password-form.html I created a file called setpassword....
2
votes
1answer
134 views

Invalid Verification Code Customization?

When a user attempts to reset their password, they're emailed a link -- if they click on this link late, or click on it twice, they're shown the "Oops! Invalid verification code. Please login or reset ...
1
vote
1answer
149 views

Reset admin account password using command line interface

Can I reset admin password using console CLI interface? Didn't see anything like that when I run the craft file directly and it displayed list of commands.
0
votes
1answer
30 views

Craft 3 Custom Set Password Styles

I've been building frontend pages for non-admin users with layouts matching the rest of the enduser site. For the "Set Password" page, I was able to build the form and set it up via the ...
2
votes
1answer
148 views

Set Password form - use front-end template for admin users

I am currently building an intranet. I have created a password reset and a set password form that is used on the front-end. However, admin users get redirected to the 'Craft' set password form. is ...
1
vote
1answer
123 views

Enforce password change every 90 days (3 months)

I am currently building an intranet for a client and one of their requirements is that staff must update their passwords every 90 days. I assume I would need to build a plugin for this, but what ...
1
vote
1answer
204 views

Unable to change password

I am unable to change my password, as an admin in the CP of Craft. I tried resetting it but it did not work.
1
vote
0answers
58 views

How to localize password emails and password change form?

Just wrapping up my first multi-language Craft 2.x site, and the last localization issue we're having is the password reset process. I can't find a way to localize: The email which is triggered by ...
1
vote
1answer
641 views

Getting “Invalid verification code.” on password reset

I've had a few users on our site have trouble resetting their password. They go through our "Forget password" flow on the front-end of our site, receive the reset email, which allows them to create a ...
2
votes
1answer
209 views

Can Auth0 be used for Craft Commerce user accounts?

I want to use Auth0 to provide a Single Sign On (SSO) for a couple of services I am integrating, one of which is Craft Commerce user accounts. Does Craft Commerce allow something like Auth0 for ...
1
vote
1answer
684 views

Reset the password of an admin account

I recently inherited a project in Craft from another developer, but he's moved on and no one knows what his admin password was. I've tried generating a password on an account with a fresh install and ...
1
vote
1answer
72 views

How to get the original entered password value on registration form error?

I want to customize the user-registration-form with error/success-states. If, for example, the user enters a wrong email, but correct username and password, it would be nice to set the value of the ...
1
vote
1answer
339 views

Invalid verification code. Please login or reset your password

I am sending the set Password URL to a user to set their password after ADMIN create a user in CP. I am using craft()->users->getPasswordResetUrl($user) to generate the URL for set password ...
1
vote
0answers
100 views

Set password for user when create from CP

I would assign the password and send it to the user in an email when I create that user from Backend Control Panel. I have the following code, but I got False return on craft()->users->saveUser(...
2
votes
1answer
204 views

Redirect on front end Password Redirect not working

Craft 2.6.2963 I've got a password reset form on the front end which works correctly sending the email. However it doesn't redirect on submit, unless you are loggedin. redirect works if logged in, ...
3
votes
1answer
255 views

setPasswordPath being ignored

Any idea why the following would be ignored following a frontend new password form? The user group does not have access to the control panel. 'setPasswordPath' => 'account/login/password/new', ...
1
vote
1answer
748 views

Unable to Log in

I am locked out of my site (a new project still on my local MAMP server) and can't log back in. I have tried to rest my password but I haven't received any emails. I also tried to go through MYSQL and ...
0
votes
1answer
103 views

Protecting paths with htpasswd

I would like to know if it is possible to protect some sections of the site with an htpasswd or not? I know that I could protect it by using user groups in my template, but I'm looking at avoiding ...
3
votes
1answer
765 views

Craft password encryption

When I reset my password with the same password I used before. I checked the MySQL database the old encrypted password is different from new encrypted password. Do you guys know why?
1
vote
1answer
240 views

Register front end member from admin area with password

I'm not certain if this is possible but what we want to do is the following: Have an admin register a new user in the admin, including a password for them so that they can pass along these ...
1
vote
1answer
206 views

How to keep the setPasswordPath config when reset password link is expired?

In config.php file, setPasswordPath is set to match a custom template. This is working fine by following the reset password link sent by email (for a front end user). But after I've changed the ...
1
vote
1answer
337 views

How do I UNLOCK my account?

My account is locked and I cant figure out how to unlock it. I tried resetting the password, but have yet to receive an email with a new one. Is there an alternative way to logging back on? I recently ...
1
vote
1answer
256 views

Password validation for resetting password

I have the following code to further validate passwords when creating/registering an account which is working fine. However, when trying to use this same validation for resetting a password I am not ...
3
votes
0answers
133 views

setPasswordPath doesn't seem to be working [closed]

This looks like a bug to me: If I set the setPasswordPath in the general config file, then the template that I've set up is not showing up, it loads the default one when I try to load: http://site....
1
vote
0answers
132 views

htpasswd issues with Craft

So I raised a previous thread here. https://craftcms.stackexchange.com/questions/16741/conflict-with-htaccess-htpswd Basically with the site behind a htpasswd (as it is a staging url) after ...
1
vote
1answer
144 views

What is the least intrusive way to allow a user to change their email address on the front-end?

I have a page that will allow the user to change their name, email address etc. If I have an email field on my page and submit I get this error. Param “password” doesn’t exist. I have read that in ...
1
vote
2answers
121 views

Importing members from EE without password reset

We've rewritten an EE site on Craft and now need to import the members. My understanding is that since passwords are hashed & not encrypted there is no way to transfer the passwords from EE to ...
1
vote
1answer
443 views

Front end user profile: update password

Typical scenario: users log in on the front-end and have a profile page where they can update their info, including changing their current password. I have referenced this article from 2014 but it's ...
1
vote
1answer
337 views

Update user password

I'm trying to update a user password on save via a custom field (on registration via the back-end - the admin needs to specify a password on registering a user). Is this even possible? Came across ...
1
vote
1answer
129 views

Require password from current user on front-end form?

I have a controller that handles some font-end form validation. From that controller I’d like to require the current (already logged in) user’s password to update any field. How can I do that?
20
votes
3answers
7k views

Reset password with MySQL

Is there a way to reset an admin account's password by modifying the MySQL directly? I've found the craft_users table where the hashed password is stored but I don't know how to hash a string so that ...
3
votes
1answer
437 views

Login attempts limit

We've just had a security review of a client's site and one main issue raised is that a brute force attack would reveal the password if the username was guessable (ie "admin"). Could a limit on the ...
2
votes
1answer
67 views

Is there a way to speed up password hashing?

I am setting up a system that migrates users from an external source and have determined the most time expensive part is when the UsersService _setPasswordOnUserRecord method hashes the password $...
4
votes
1answer
221 views

How do I set the user password when using saveUser service method?

I am saving users from an external source and able to create them in the Craft db as users. However, each user's password is set to null despite setting it on the user model prior to saving it. Is ...
0
votes
2answers
303 views

Auto login after password reset?

I like the setting autoLoginAfterAccountActivation. Is there something similar to log in users after a password reset? I can approximate this by using the users.onSetPassword event, confirming the ...
0
votes
1answer
667 views

Possible to change style of password reset page

Is it possible to change how the password reset box appears when a user requests a password reset? Ideally we would like to include the same functionality but within a page that we have control over ...
8
votes
1answer
827 views

How do I enforce stronger password requirements on my Craft site?

Craft’s only password requirements are that it is between 6 and 160 characters long. I want to require my users to enter passwords that are at least 7 characters long, with at least one number and one ...
0
votes
2answers
192 views

Checked “Require a password reset on next login” on my account, can't log in anymore

As a test, I checked the "Require a password reset on next login" box for my account and then logged out. I tried logging in, expecting some sort of password reset screen, but nothing happened. I ...
2
votes
1answer
209 views

Password should fail on front-end registration form

Update For anyone else having a braindead moment, registration form errors only display for password when logged out. If you're logged in as admin they won't display. User posted even though using an ...
3
votes
1answer
964 views

Set Users' passwords

When you create a new user in the craft backend CMS, it used to be possible to set (and change for existing users) the password. It appears recently (last 6 months+) that this feature has been ...
4
votes
3answers
565 views

How can I import existing users with passwords stored in a different format than Craft's hash format?

Se need to import a large user table to a Craft installation. Unfortunately, the passwords in the imported data are SHA1 encrypted (and salted). What is the best way to enable the login of the users? ...