My WordPress configuration generates a new password and sends it via email whenever a user uses Forgot Password link.

How can I make WordPress send a Reset Password link instead of a new password?

I want this so that malicious visitors can't use the Forgot Password link on the site and enter someone else's email address to cause an unwanted password reset for that user.

My WordPress configuration generates a new password and sends it via email whenever a user uses Forgot Password link.

How can I make WordPress send a Reset Password link instead of a new password?

I want this so that malicious visitors can't use the Forgot Password link on the site and enter someone else's email address to cause an unwanted password reset for that user.

• security
• password

• 1 The default behaviour is to receive a link to change the password. Maybe you have a plugin that's modifying it? – Himad Commented Apr 10, 2020 at 18:16

1 Answer 1

Commentor was correct. A plugin had changed default behavior.