How To Shorten Password-reset Links With BetterShield?
Password-reset links for administrators and editors expire sooner than the usual 24 hours.
With BetterShield, password-reset links for administrators and editors expire sooner than the usual 24 hours.
What it does
Short reset links for admins and editors is under BetterShield › Protection › Login & Access. Password-reset links for administrators and editors expire sooner than the usual 24 hours. It is off by default.
Step 1: Open Protection › Login & Access
Open Protection › Login & Access and find Short reset links for admins and editors.
Step 2: Shorten password-reset links
- Open its preview and read what will change. The preview changes nothing.
- Choose How long their reset link works: 15 minutes, 1 hour (default), or 4 hours. Accounts outside the privileged roles keep the usual 24 hours.
- Turn on the fix. If the screen asks you to confirm recovery or your password, complete that before continuing.
Recommended settings
Our advice is to test this on staging, then apply it when the behavior fits the site. Keep a working recovery method before changes affecting sign-in or the site address.
What it can break and how to undo
Someone opening an older reset email may need to request a fresh link. This does not change the recovery link. Turn the fix off to use its undo, then check the original workflow. A change is recorded in the activity log; an undo does not erase that record.
Final Outcome
The row should show the fix is on. Test the affected operation with an appropriate account, then check the finding. The score and Findings update on their own after the change. If the finding stays open, press Check Again to see what the check still sees. A server or another plugin can enforce a setting independently, so switching BetterShield off does not necessarily remove that other protection.
Related
This is how you can shorten password-reset links with BetterShield.
Getting Stuck? Feel free to contact our Dedicated Support Team.