Problem : Link for reset password don’t work

Plugin version ?

Version 1.4.3

I can confirm that the password reset link that gets emailed to you does not work and redirects you to the login page with an error message:

Your password reset link appears to be invalid. Please request a new link below.

This is on WordPress version 4.9.8 and plugin version 1.4.3.

Fortunately, I was able to deactivate the plugin and the original login and reset password URLs work again.

I have also encountered this issue.

WordPress version 4.9.8
WPS Hide Login version 1.4.3

After creating a new user, they click the link in the email, and receive an error message “Your password reset link appears to be invalid. Please request a new link below.” This creates a loop of entering the email, and clicking the link.

I then deactivated the plugin and the problem was resolved.

Can you fix this?

I look at this

Hello everyone,

I just did a test on a dev site, I do not reproduce the problem.

I have the URL changed with /?action=rp@key=xxxx

It appears to be happening only on my production site, and not on staging. Can you try a test on a production site?

Here’s the steps I follow:

? Login to WP admin
? Go to “Users”
? Create a new user
? Receive email with username and password info
? Click link in email
? get error message ” Your password reset link appears to be invalid. Please request a new link below. (see screenshot above)
? enter email address
? receive password reset email
? click link, get same error message again
? URL:/?action=lostpassword&error=invalidkey

Click link in email ==> /?action=rp@key=xxxx ??

if so, it works for me with login url /connecter replace /wp-admin

The link in email is what you mention above, however upon clicking the link it brings them to the reset password page instead of the “enter your new password” and shows these two messages as if they already requested to change their password:

Please enter your username or email address. You will receive a link to create a new password via email.

Your password reset link appears to be invalid. Please request a new link below.

[enter username or email]
Button: Get new password

Then the user receives the standard reset password email, but the link in the email is the same. Hence the loop.

They never get the chance to actually enter the new password. So maybe the issue is with the reset password page?

To renew your password, click on the following link:

/connecter/?action=rp&key=You08HiXeNN0HOZQvnEL&login=nicotest2

unable to reproduce your problem

I reached out to my host and they fixed it by excluding the login page from server side caching, along with the argument (lostpassword) for when resetting a password.

For other users experiencing this it sounds like the custom URL just needs to be excluded from server-side cache.

Thanks for digging in as well to confirm it’s not a plugin issue necessarily.

Excluding the new login path from caching solved the problem for me too. Thanks.

Great
Have a good day