How does the Forgot Password Feature work?

This article reflects the process for sites that use the ePublishing login process only, not for sites with a third party login process.

How it works

1. When a user clicks on the Forgot your password? link on the /user/login page, they are redirected to the /user/reminder page.

2. The user enters their account email address on the /user/reminder page and is redirected back to the login page with the message "We have sent an email with instructions for resetting your password."

3. The user checks their email for the Password Reset email (see below for details) and clicks on the "Please click here to login" link.

4. The user is sent to the Reset Password page using a secure token in the url - like /user/reset/b9HTBYEKy9t9WJlkIqkcFfj0KHVDd9ivEDWWtHRKaOFsKXpqF0e37IzQM0s2vLcZ

5. After resetting their password, they are taken back to the Login page to enter their email address and new password.

The Password Reset Email

The user will receive an email with the subject: "Your [website name] login information" which will say:

-----------------------------------------------------------

[Your logo here]

Hello, [user first last name]!

We've sent you this message because you requested that your password be reset. To get back into your account you'll need to create a new password.

After you login, you can change your password under Account Information.

Here's how you do that:

  1. Click on the link below to open a new secure browser window.
  2. Enter and confirm your new password and click the Update button.
  3. You will be forwarded to the login page and asked to enter your new password.

Please click here to login.

----------------------------------------------------------

Editorial Content Areas to be updated

There are two editorial content areas you will want to review / add content to.

user.retrieve.password 

This appears on the Retrieve Password page found at  /user/reminder.

The message can be changed to say:

Please enter your account's email address in the form below and we will send you instructions for resetting your password.

user.password.reset (note - this will be available 3/30/22)

This appears on the /user/reset page and is intended for instructions on resetting their password. It could say:

Please enter your new password below. Passwords should be at least 8 characters in length and must include at least one capital letter and one number.

Questions?

Contact your project manager if you have questions regarding this process.