Open Menu

Resetting User Passwords

You can update individual user account passwords when they meet the following criteria:

1) They are a basic member on your site.
2) They are only a member on your site and no other sites on the platform.

If the user account that you are editing fails either of the above criteria, the password fields won't show for you when editing their account. This logic is in place to prevent potential administrative security holes on the network. It is complicated overall, but necessary to ensure the safety of user accounts on the network.

Sample Scenario:
- Your organization has two sites, Site A and Site B.
- Each site has different community managers that don't have any overlap or know each other.
- User X is an administrator on Site A and a basic user on Site B.
- User Y is an administrator on Site B.

If password reset was always available, User Y could reset User X's password on Site B. As a result, they would now know User X's password and, thus, could log into and have administrative access to Site A.

If you do have a member of your site who does not meet the criteria, you can send them to URL/pwreset/ which will allow them to step through the password reset process on their own.