A User Forgot Their Password
When a user forgets their password, there are a couple of options to provide them with a new one.
Forgot Your Password?
In the most direct option for resetting a user's password, the user handles all the steps. This option doesn't require Admin intervention at all.
The login screen on the site contains a 'Forgot Your Password?' link. For security purposes, using this link won't send a user their password, but will give them the opportunity to create a new one.
The user will first be asked to provide their email address. This will need to be the email address that is assigned to their account.
Once the user submits their email address, they will be directed to a screen that provides them with a 5-digit verification code and instructions on how to reset their password. They will also be sent a password reset email with a link. This link will expire in 1 hour. After that, the user will have to restart the process again if they want to reset their password.
This creates an entry in the site's Activity Log, where an Admin can find information about when the user requested the password reset, and from which IP address.
When the user clicks the link in the email, they will be sent to a page on the site that prompts them to enter the 5-digit verification code that they received on the Reset screen.
Once the user has entered their verification code, they will have the opportunity to enter a new password.
Change Password
In this option, the Admin can manually reset the user's password through the User Detail page.
From the User Detail screen on the User Info tab, a SuperAdmin or an Admin with the Users Area role can click the "Change Password" button to create a new password for the user.
For security reasons we don't suggest that you email the new password to the user. It would be better to provide the user with the new password over the phone.
The user can then log in with the password you entered in User Detail, and use the following method to change their password themselves.
User Changes Password from My Account
If a user is already logged in, they can access a Change Password interface from My Account, or from www.yourDomain.com/MyAccount/ChangePassword.
In the "Account Activities" box at the bottom of My Account, select "Change Password".
Simply enter the new password twice and click "Change Password".