Password reset page

[Sean Hulbert <sh...@securitycentric.net.INVALID>]

Hello Nick,

Is there a hidden password reset for user accounts or a rational on why 
there isn't one?

-- 

*Thank You*
Sean Hulbert

Re: Password reset page

[Michael Jumper <mj...@apache.org>]

On October 10, 2025 5:20:14 PM PDT, Sean Hulbert <sh...@securitycentric.net.INVALID> wrote:
>Hello Nick,
>
>Is there a hidden password reset for user accounts or a rational on why there isn't one?
>
>-- 
>
>*Thank You*
>Sean Hulbert

Administrators can reset other users' passwords, so that's the current route. As an admin, you can open the user editor for a user account, set the password to something else, and mark the password as expired to force the user to set it to a value of their own choosing when they next log in.

Historically, this hasn't been implemented simply because doing so would require implementing some external means of verifying user identity and sending a reset link via SMTP. Not impossible, just not something that's been a sticking point thus far.

- Mike