• I am trying to reset my password, it’s probably a virus or some other infestation, I couldn’t log in because someone or something changed my password. I tried the forgot password option and couldn’t reset it through the form. Every time I reset it my password is dropped and the WordPress suggests its own machine-generated password. So I just copied one of those and logged into the control panel. Then I went to the User, Profile, and couldn’t reset the password either.

    In the Administration Screen, menu, go to Users > All Users.
    Click on your username in the list to edit it.
    In the Edit User screen, scroll down to the New Password section and click the Generate Password button.
    If you want to change the automatically generated password, you can overwrite it by typing a new password in the box provided. The strength box will show you how good (strong) your password is.
    Click the Update User button.

    All right, that doesn’t work. I cannot override the automatically generated password. When I click the button to save my password, it disappears and is replaced with a “fresh” automatically generated password and so ad infinitum. I well understand that this is some malicious thing but have not figured out what could this be and how to deal with it. Any help would be appreciated.

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • lisa

    (@contentiskey)

    suggestions:
    *do a site check using this security tool:https://sitecheck.sucuri.net/
    *review this guide for sites that were hacked: https://ww.wp.xz.cn/support/article/faq-my-site-was-hacked/
    *you can set a new password directly in the database connected to your website. (no WordPress dashboard “WP-Admin” access is needed )
    (often the database is accessible in an area of your webhosting account PHPMYADMIN)
    review this guide:
    https://ww.wp.xz.cn/support/article/resetting-your-password/#through-phpmyadmin

    Thread Starter fledermausi

    (@fledermausi)

    Thank you, Lisa, thank you.
    I was able to rest my own password through phpmyadmin. Thanks. I am quite sure other users, 600 at all, won’t be able to use that option.
    Securi.net did not find any problem.
    The site was probably hacked (through ftp?) because Wordfence deleted almost a thousand of suspicious files.
    But the problem doesn’t go away.
    If I try to type my own password, it gets replaced by an automatically generated password. WordPress generates automatic passwords and doesn’t let users choose their own passwords. I tried disabling all the plugins but unfortunately that didn’t help either.
    Thank you/

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Cannot reset passwords’ is closed to new replies.