Do you want to reset passwords for all users in WordPress?
If your WordPress site got hacked, then it is recommended to reset the passwords of all the users. However, it can be a time-consuming process.
In this article, we will show you how to easily reset passwords for all the WordPress accounts and automatically notify the users about their new passwords via email.
Why Reset Passwords for All Users in WordPress?
If you think that your WordPress website has been hacked, then it is a good idea to reset the passwords of all users as soon as possible. This will help prevent the hacker from accessing your website or your users’ accounts.
You should also reset passwords for users if you are migrating your site to a new host to prevent any problems with your users’ accounts during the migration process.
Resetting passwords to replace them with stronger ones is also beneficial for overall WordPress security.
Having said that, let’s see how to easily reset passwords for WordPress users.
How to Reset Passwords For All Users in WordPress
Upon activation, head over to the Users » Emergency Password Reset page from the WordPress admin sidebar.
Once you are there, you can start by typing the email subject for the email that will be sent to your users upon password reset next to the ‘Email Subject’ option.
After that, type the From Name and message that will be sent to the subscribers in the email.
By default, the plugin uses the admin email address to send password reset emails to all the users. However, if you don’t want to use the administrator email, then you can type any email address of your choice into the field.
After that, just click the ‘Save Settings’ button to store your settings.
Finally, click the ‘Reset All Passwords’ button.
The plugin will now automatically change passwords for all users (including the admin user who initiated the password reset). It will also send an email notification to all users containing their new password.
If, for some reason, the user does not get their password in the email, then they can easily recover it. All they need to do is click on the ‘Lost your password’ link on the user login page.
For detailed instructions, you may want to see our WordPress tutorial on how to recover your password in WordPress.
After resetting all passwords, we recommend that you change your WordPress security keys, also known as SALTs. To learn more about them, please see our beginner’s guide on WordPress security keys and how to change them.
Changing the security keys will end all sessions for logged-in users, so if a hacked user was logged in, then they will automatically be logged out.
Bonus: How to Improve WordPress Login Security
There are a lot of things you can do to improve your WordPress login security.
First, you need to enforce strong passwords for users on your WordPress site. You can also add an extra layer of security by password-protecting your WordPress admin (wp-admin) directory.
Another common technique used by hackers is to run scripts that use random passwords in an attempt to crack your WordPress password.
For more details on protecting your website, you may want to see our ultimate WordPress security guide.
We hope that this article helped you learn how to reset passwords for all users in WordPress. You may also want to see our step-by-step guide on how to back up your WordPress site and our expert picks for the most popular WordPress themes.