Questions tagged [password]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
19 views

How to extract a list of “copy password reset urls” for all users?

We are migrating users from a e-commerce site to a new craft commerce 2.x site. Apparently it's a little too confusing for our customers to use the "forgot password" link to obtain a new password. ...
0
votes
0answers
22 views

User profile form, repeat new password and check if they match

So there's the function to set a new password, but is there also the possibility to create a second password field to check if both new passwords matches and only then set the new password?
1
vote
1answer
18 views

Default Users Password Regex

Assume a front end registration form. I would like to validate user passwords before posting to the server. I have not been able to find the default password requirements as of yet for craft 3. Could ...
0
votes
0answers
14 views

Difference of Restore Password Link

I have my own set password form for my site. However, the provided link does not always go to the own reset password form. Actually, there are two formats of the URL. 1) This link goes to my own ...
1
vote
2answers
50 views

Prevent EVENT_BEFORE_VALIDATE in specific case

I have a registration form and its custom validation in PHP plugin code. However, the validation works when user set a new password. I supposed that $event->isNew is good to detect if it is a new ...
1
vote
1answer
32 views

Move users with Feed Me

Is it possible to move users along with their passwords? I can see the mapping option, but how do I output password in a template (I'm moving data between craft installations). The below code does ...
0
votes
1answer
35 views

Password Reset via SMS

Is it possible to send the Password reset email via SMS instead of email? I'm signing users up using their mobiles and a 6 digit pin + a randomly generated email.
2
votes
1answer
96 views

Auto login user after password reset via a plugin in Craft3

Unlike in Craft2, there doesn't seem to be a way in Craft3 for a plugin to automatically login a user after a password reset. In Craft2, a plugin could listen for users.onSetPassword to determine ...
2
votes
1answer
121 views

Locked out of my Account, how to get back in?

This really stressing me out! When trying to log back in to Craft CMS today after som time my password wouldn´t work. I have not changed it and when trying to reset the password I´m only getting: "...
1
vote
2answers
126 views

Frontend form to change Craft Commerce user's password?

I'm trying to modify Craft 3's example 'Change password' form to work with a logged in Commerce 2 user, and have copied that code to templates/setpassword.twig. Two problems... (1) The {{ code }} ...
1
vote
1answer
122 views

Craft 3 setPasswordPath config not working for front end users

How do I change the link that's sent in a forgot password email that's sent to front end users in Craft 3? The setPasswordPath config isn't working for me. The users don't have access to the CP. In ...
1
vote
1answer
104 views

Craft 3 validate new password in change password

I'm trying to validate user's new password and confirm password in my custom plugin init(). Event::on(User::class, User::EVENT_BEFORE_SAVE, function(Event $event) { $formData = $_POST; $...
1
vote
2answers
45 views

Set Password on Test User Account in Localhost

I'm trying to set the password for a 'test' user account on my localhost test site. I don't have an email server to send the reset emails, so I've been using the copy URL method. When I do go to the ...
1
vote
1answer
57 views

Possible to set Forgotten Password path in config?

Looking at the documentation here: https://docs.craftcms.com/v2/config-settings.html#users I have set loginPath, invalidUserTokenPath and setPasswordPath. However, it appears that there isn't a ...
0
votes
0answers
136 views

Craft 3: Custom “Set Password Form” not working

I'm trying to make a custom page for setting a new password. I found the following in the docs: https://docs.craftcms.com/v3/dev/examples/set-password-form.html I created a file called setpassword....
2
votes
1answer
155 views

Invalid Verification Code Customization?

When a user attempts to reset their password, they're emailed a link -- if they click on this link late, or click on it twice, they're shown the "Oops! Invalid verification code. Please login or reset ...
1
vote
1answer
234 views

Reset admin account password using command line interface

Can I reset admin password using console CLI interface? Didn't see anything like that when I run the craft file directly and it displayed list of commands.
0
votes
1answer
32 views

Craft 3 Custom Set Password Styles

I've been building frontend pages for non-admin users with layouts matching the rest of the enduser site. For the "Set Password" page, I was able to build the form and set it up via the ...
2
votes
1answer
187 views

Set Password form - use front-end template for admin users

I am currently building an intranet. I have created a password reset and a set password form that is used on the front-end. However, admin users get redirected to the 'Craft' set password form. is ...
1
vote
1answer
138 views

Enforce password change every 90 days (3 months)

I am currently building an intranet for a client and one of their requirements is that staff must update their passwords every 90 days. I assume I would need to build a plugin for this, but what ...
1
vote
1answer
325 views

Unable to change password

I am unable to change my password, as an admin in the CP of Craft. I tried resetting it but it did not work.
1
vote
0answers
64 views

How to localize password emails and password change form?

Just wrapping up my first multi-language Craft 2.x site, and the last localization issue we're having is the password reset process. I can't find a way to localize: The email which is triggered by ...
2
votes
1answer
833 views

Getting “Invalid verification code.” on password reset

I've had a few users on our site have trouble resetting their password. They go through our "Forget password" flow on the front-end of our site, receive the reset email, which allows them to create a ...
2
votes
1answer
262 views

Can Auth0 be used for Craft Commerce user accounts?

I want to use Auth0 to provide a Single Sign On (SSO) for a couple of services I am integrating, one of which is Craft Commerce user accounts. Does Craft Commerce allow something like Auth0 for ...
1
vote
1answer
1k views

Reset the password of an admin account

I recently inherited a project in Craft from another developer, but he's moved on and no one knows what his admin password was. I've tried generating a password on an account with a fresh install and ...
1
vote
1answer
89 views

How to get the original entered password value on registration form error?

I want to customize the user-registration-form with error/success-states. If, for example, the user enters a wrong email, but correct username and password, it would be nice to set the value of the ...
1
vote
1answer
403 views

Invalid verification code. Please login or reset your password

I am sending the set Password URL to a user to set their password after ADMIN create a user in CP. I am using craft()->users->getPasswordResetUrl($user) to generate the URL for set password ...
1
vote
0answers
109 views

Set password for user when create from CP

I would assign the password and send it to the user in an email when I create that user from Backend Control Panel. I have the following code, but I got False return on craft()->users->saveUser(...
2
votes
1answer
225 views

Redirect on front end Password Redirect not working

Craft 2.6.2963 I've got a password reset form on the front end which works correctly sending the email. However it doesn't redirect on submit, unless you are loggedin. redirect works if logged in, ...
3
votes
2answers
331 views

setPasswordPath being ignored

Any idea why the following would be ignored following a frontend new password form? The user group does not have access to the control panel. 'setPasswordPath' => 'account/login/password/new', ...
1
vote
1answer
885 views

Unable to Log in

I am locked out of my site (a new project still on my local MAMP server) and can't log back in. I have tried to rest my password but I haven't received any emails. I also tried to go through MYSQL and ...
0
votes
1answer
117 views

Protecting paths with htpasswd

I would like to know if it is possible to protect some sections of the site with an htpasswd or not? I know that I could protect it by using user groups in my template, but I'm looking at avoiding ...
3
votes
1answer
906 views

Craft password encryption

When I reset my password with the same password I used before. I checked the MySQL database the old encrypted password is different from new encrypted password. Do you guys know why?
1
vote
1answer
264 views

Register front end member from admin area with password

I'm not certain if this is possible but what we want to do is the following: Have an admin register a new user in the admin, including a password for them so that they can pass along these ...
1
vote
1answer
244 views

How to keep the setPasswordPath config when reset password link is expired?

In config.php file, setPasswordPath is set to match a custom template. This is working fine by following the reset password link sent by email (for a front end user). But after I've changed the ...
1
vote
1answer
386 views

How do I UNLOCK my account?

My account is locked and I cant figure out how to unlock it. I tried resetting the password, but have yet to receive an email with a new one. Is there an alternative way to logging back on? I recently ...
1
vote
1answer
287 views

Password validation for resetting password

I have the following code to further validate passwords when creating/registering an account which is working fine. However, when trying to use this same validation for resetting a password I am not ...
3
votes
0answers
141 views

setPasswordPath doesn't seem to be working [closed]

This looks like a bug to me: If I set the setPasswordPath in the general config file, then the template that I've set up is not showing up, it loads the default one when I try to load: http://site....
1
vote
0answers
136 views

htpasswd issues with Craft

So I raised a previous thread here. https://craftcms.stackexchange.com/questions/16741/conflict-with-htaccess-htpswd Basically with the site behind a htpasswd (as it is a staging url) after ...
1
vote
1answer
151 views

What is the least intrusive way to allow a user to change their email address on the front-end?

I have a page that will allow the user to change their name, email address etc. If I have an email field on my page and submit I get this error. Param “password” doesn’t exist. I have read that in ...
1
vote
2answers
136 views

Importing members from EE without password reset

We've rewritten an EE site on Craft and now need to import the members. My understanding is that since passwords are hashed & not encrypted there is no way to transfer the passwords from EE to ...
1
vote
1answer
461 views

Front end user profile: update password

Typical scenario: users log in on the front-end and have a profile page where they can update their info, including changing their current password. I have referenced this article from 2014 but it's ...
1
vote
1answer
364 views

Update user password

I'm trying to update a user password on save via a custom field (on registration via the back-end - the admin needs to specify a password on registering a user). Is this even possible? Came across ...
1
vote
1answer
136 views

Require password from current user on front-end form?

I have a controller that handles some font-end form validation. From that controller I’d like to require the current (already logged in) user’s password to update any field. How can I do that?
23
votes
3answers
9k views

Reset password with MySQL

Is there a way to reset an admin account's password by modifying the MySQL directly? I've found the craft_users table where the hashed password is stored but I don't know how to hash a string so that ...
3
votes
1answer
480 views

Login attempts limit

We've just had a security review of a client's site and one main issue raised is that a brute force attack would reveal the password if the username was guessable (ie "admin"). Could a limit on the ...
2
votes
1answer
73 views

Is there a way to speed up password hashing?

I am setting up a system that migrates users from an external source and have determined the most time expensive part is when the UsersService _setPasswordOnUserRecord method hashes the password $...
4
votes
1answer
242 views

How do I set the user password when using saveUser service method?

I am saving users from an external source and able to create them in the Craft db as users. However, each user's password is set to null despite setting it on the user model prior to saving it. Is ...
0
votes
2answers
314 views

Auto login after password reset?

I like the setting autoLoginAfterAccountActivation. Is there something similar to log in users after a password reset? I can approximate this by using the users.onSetPassword event, confirming the ...
0
votes
1answer
733 views

Possible to change style of password reset page

Is it possible to change how the password reset box appears when a user requests a password reset? Ideally we would like to include the same functionality but within a page that we have control over ...