A lightweight WordPress plugin that disables the password reset functionality from the login page.
Once activated, it hides the "Lost your password?" link, blocks direct access to the reset page, and completely disables the password reset feature.
- Hides the "Lost your password?" link on the login page
- Blocks direct access to
/wp-login.php?action=lostpassword - Disables password reset functionality globally
- Lightweight (single file, no external dependencies)
- Safe and compatible with WordPress core updates
- Download the plugin as a
.zipfile or clone the repository. - Upload it to your WordPress site under
/wp-content/plugins/. - Activate the plugin from the WordPress Admin Dashboard → Plugins menu.
This plugin:
- Does not add any database entries.
- Does not modify existing WordPress files.
- Uses only WordPress core hooks (
allow_password_reset,login_enqueue_scripts,login_init). - Is safe against hacking attempts and will continue working after WordPress core updates.
Once activated:
- Users will not see the "Lost your password?" link on the login page.
- Direct access to the lost password URL will redirect back to the login page.
- Admins are responsible for managing password resets manually.
- This plugin is intentionally simple and minimal.
- No settings page is required — just activate and it works.
- Perfect for websites where password reset must be handled manually by administrators.
MIT License — free to use, modify, and share.