Is there a way to force users in my site to change password when logging in?

Hello,

Is there a way to force users in my Classified site to change password when logging in?

Goal: I’m creating a Craigslist-style site for my company to use internally using HivePress Plugin and ListingHive Theme.

  1. I want to create users on the backend in WordPress for my classified site with a default password.
  2. When the user signs in with the username and password I created for them, I want it prompt them to change their password.

I am trying not to have to use a mail server in my project. So not even wanting to have them get emails about creating a password (Password reset link), or using the Forgot Your Password link at all.

Is this even possible? I have tried plugins like Login Security , Password Policy Manager, and Melapress Login Security.

Login Security Plugin, for example, has an option to “Reset Password on first login” but this doesn’t work on my Classified site. It only works if they login to the wordpress page.

For example, if I log out of my WordPress Dashboard, and then try to login as the user, it WILL prompt them to reset their password. However, if that user goes to my WordPress Classified site, and logs in with HivePress, it never prompts to change their password. So it looks like these plugins are only asking to change their password on first login on the wordpress site? I’m really new to all this. Any help would be appreciated.

Hi,

Unfortunately, there is no such feature because third-party plugins will not change the flow for the HivePress login form frontend, only for the WordPress backend. As a workaround, you can avoid issuing a password if you created them via email, just send an email, for example, “to log in, please reset your password”, and then users will be able to log in by changing the password to their personal one. As another workaround, you can simply send them an email to clarify that they need to change their password after they log in, since passwords themselves are not stored in their pure form anywhere in WordPress, and there will be a risk only if users’ emails are hacked, but users usually register with different email providers.

​I hope this is helpful to you.

Hi Andrii,

Thanks for clarification. I’m still a bit confused on the workarounds. Again, in my classifieds website I’ll be self-hosting, I will not use a mail server at my company. So that pretty much rules out things like “Forgot My Password” or users receiving emails about Password Reset sent by admin and such things.

So, I’m really trying to figure out the easiest way to have ~150 user accounts created, but somehow have these users create their own personal password.

  1. Lets say I am ready to launch the site LIVE to all company. Are you saying one option is I could send them the website self-hosted on my server that they can go to. Then, they can click register, setup their username and password there and be set?

  2. Or are you saying I will want to create all 150 users on the WordPress Admin Dashboard >Users Section, make them all contributors, and set a generic password for all 150 accounts. Then, once all accounts have been created on the backend, email each 150 users one by one with the username and password I assigned them? Then, show them (maybe via screenshots) how to navigate to Profile Settings, and Change their password?

Thanks and sorry if I’m way off. New to all this.

Hi,

  1. If you don’t have a requirement to manually create users, then the method you wrote will be the easiest. If you have a mailing list with these users, then you can simply send out a mailing list with the URL of the site and the words “Please create an account”, then they will simply fill out the form and create accounts.

  2. If you manually create accounts in WP > Users, there are two workarounds, the first is to manually send each user an email like “Your account has been created”, please reset your password to log in. Another option is to send an additional password in this email and ask them to change it after logging in (but there is no such feature, and we still recommend using the first option).

Also, please note that regardless of whether it is a hosted site or not, it should still send emails, otherwise, many features will not work. You can use any SMTP plugin, I recommend checking out this documentation: How to set up emails - HivePress Help Center

Hello Andrii,

Thanks again for your help. So I have done the following so far.

  1. I went to HivePress>Emails. I created an email (see screenshot) advising user to please set their password.
  2. I created a new user in WordPress backend and left the box checked for “Send User Notification” "Send the new user an email about their account. Does this check box itself send the new email event I setup in step 1? Or is that a word Press setting?
  3. If I go to the user I just created in WordPress Dashboard, there is a Password Reset>Send Reset Password. It states “Sent test1 a link to reset their password. This will not change their password, nor will it force a change.” Is this going to send them the Hive Press > Email I setup in step 1?

Please, if you can create a video this would be much easier, and explain the workflow you described from your Step 1 when you mention "manually send each user an email like “Your Account has been created, please reset your password to login.” What do you mean by this. Am I creating the users manually from WordPress Dashboard>Users first, then clicking a Send Reset Link under their account in WordPress? Just confused still on how I’m creating the user and then what I do next as far as showing user how to change their password.

Thanks!

Travis

New_User_creation

Hi,

Sorry, but unfortunately, this request is beyond the scope of our support, as this is already a guidance for creating a website, and we provide general guidance on our current features.

Regarding your first question, please note that you have overwritten the template that should contain a link to reset the password, if you leave everything as it is in the screenshot, then users will not be able to do this.

If you need more detailed help with website setup, I recommend hiring experts: Experts | HivePress

Hi,

I want to be able to create a new vendor and assign an existing vendor.

The goal is for that vendor to then be able to log in, edit the existing listing, and view statistics (I’ve purchased all the plugins, installed and configured the statistics plugin)

My directory has both paid and free listings.

All listings are added by us to start with.

Then, when a company wants to “own” a listing, we charge them a subscription fee to manage the listing. The listing gets verified and features and most importantly, they will be able to log in and edit the listing by changing the description, adding more images and viewing the web trafic.

I’ve created a new vendor and attached the listing to that vendor. But how do you create login details for that vendor to manage the listing?

As always, really appreciate the fantastic support from you guys!

Hi,

Please check this topic.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.