Choose who, skip who you like
Pick all users, one role, or administrators except yourself. List usernames to exclude and they stay excluded on later runs.
Some days, one password isn't enough.
Resetting accounts one at a time is slow, and it is easy to miss someone. This does a whole group in one run and shows you exactly what happened.
After a security problem
Once the site is clean, make every old password useless before anyone logs in again.
When staff change
Reset the roles that a former employee or contractor could have used.
Handing a site over
Start a new owner or client on fresh passwords, with a reset link in their inbox.
Routine hygiene
Rotate passwords for one role on your own schedule, with a record that you did.
What it does
Open Tools › Group Password Reset. Pick who, say who to skip, confirm, and go.
- Reset all users, a single role, or administrators except you
- Skip the usernames you list, and remember them between runs
- Email each person a secure reset link, never a raw password
- Or run in reset-only mode and tell people another way
- Works in batches of 20, with or without JavaScript
- Shows the latest 20 results, with counts for the whole run
- Email your administrators a branded summary afterward
- Writes an audit log of when resets started and finished
- Subjects carry the site and plugin, like
[example.com] [Group Password Reset] - Updates arrive on the normal Plugins screen
Control what happens, then see what happened
Nothing is selected by default, and every run ends with a clear result.
Reset links, not passwords
People get a secure link to choose their own new password. Raw passwords are never emailed.
Clear results, every time
Counts cover the whole run, the latest results show who was reset or skipped, and failures are called out.
Keep your team in the loop
Optional, and only after you have looked at the result.
A summary for your administrators
Choose recipients, add a note, preview it and send. The summary leaves out passwords, reset links and the list of accounts.
Reset only, if you prefer
Skip the emails entirely when you want to tell people yourself, by phone, chat or in person.
A record that stays private
Starts and finishes are logged, without storing the usernames or email addresses of the accounts you reset.
Careful with other people’s accounts.
- Reset links, not passwords
- Administrators only
- Audit log, no usernames
- Updates from GitHub
The plugin resets passwords first and then tries to send the emails. A mail failure never undoes a reset, so use reset-only mode if you plan to tell people another way. Resetting invalidates current passwords, so the plugin asks you to confirm first.
The only outside requests are update checks against this project’s GitHub releases. It is not a security scanner or a login limiter. If you think your site has been hacked, The Hack Repair Guy can help.
Install it in a minute
- Download the zip from the button below.
- In WordPress, open Plugins › Add New › Upload Plugin, choose the zip and activate it.
- Open Tools › Group Password Reset and choose Accounts to reset. Add any usernames to exclude.
- Choose whether to email reset links, tick the confirmation, and select Reset Passwords.
Download Group Password Reset
Free, and later updates arrive on the normal Plugins screen.