Title: Password Reset problem
Last modified: August 22, 2016

---

# Password Reset problem

 *  Resolved [digiman1](https://wordpress.org/support/users/digiman1/)
 * (@digiman1)
 * [11 years, 6 months ago](https://wordpress.org/support/topic/password-reset-problem-2/)
 * For the most part, *love* the plugin – I use it often.
 * However, I just ran into an issue that I hadn’t considered. While the plugin 
   does create a new url for password resetting (i.e. “resetpass”), apparently the
   code executed by the password-reset routine can’t pass the key properly… perhaps
   because of the wp-login.php move?
 * Basically… my visitor that wants to reset a password goes to the /login page,
   clicks the “lost password” link, gets their email – which has a link something
   like [http://domain.com/resetpass?key=2rZs0&login=MyUser](http://domain.com/resetpass?key=2rZs0&login=MyUser)–
   but when they click the link, they end up at a url like [http://domain.com/wp-login.php?action=lostpassword&error=invalidkey](http://domain.com/wp-login.php?action=lostpassword&error=invalidkey)…
   and obviously can’t reset their password.
 * Any thoughts about that? (Or am I doing something wrong?)
 * [https://wordpress.org/plugins/sf-move-login/](https://wordpress.org/plugins/sf-move-login/)

Viewing 5 replies - 1 through 5 (of 5 total)

 *  Plugin Author [Grégory Viguier](https://wordpress.org/support/users/greglone/)
 * (@greglone)
 * [11 years, 6 months ago](https://wordpress.org/support/topic/password-reset-problem-2/#post-5541679)
 * Thank you digiman1 for reporting the issue.
 * I just tried it out and it works fine:
    – I receive the link [http://domain.com/resetpass?key=2rZs0&login=MyUser](http://domain.com/resetpass?key=2rZs0&login=MyUser)–
   click! – then I’m redirected to [http://domain.com/resetpass](http://domain.com/resetpass),
   where I can set my new password.
 * Can you tell me more about your WordPress installation? Version, multisite… Some
   wild plugins toying with redirections, security?…
 * Another strange thing is you are redirected to [http://domain.com/wp-login.php?action=lostpassword&error=invalidkey](http://domain.com/wp-login.php?action=lostpassword&error=invalidkey)
   instead of [http://domain.com/lostpassword?error=invalidkey](http://domain.com/lostpassword?error=invalidkey)
   
   Can you check if your .htaccess file is writable and contains the rules for the
   plugin? (I think it does)
 * Thanks
 *  Thread Starter [digiman1](https://wordpress.org/support/users/digiman1/)
 * (@digiman1)
 * [11 years, 6 months ago](https://wordpress.org/support/topic/password-reset-problem-2/#post-5541705)
 * Hi, thanks for the quick response!
 * Yes, I think something is odd in this install – I just tried a different site
   that also uses the plugin and the password recover works as expected.
 * This *is* on a WPEngine managed WP install, so they do have their own security
   going on, although nothing that I can see that’s problematic. My htaccess does
   have the right rules, and there’s nothing else working with redirections…
 * And, I find the final-redirect-to-/wp-login.php behavior odd as well… it bounces
   there *after* a quick stop at /lostpassword/
 * Anyway, on this managed server, I’m a little less worried about brute-force and
   other attacks, but moreover I only have a few folks that *need* to log in to 
   the site, so password recovery really isn’t a big “must-have”.
 * I’ll keep experimenting, and if I come up with useful info to share, I’ll do 
   so.
 * Thanks again for the response!
 *  Plugin Author [Grégory Viguier](https://wordpress.org/support/users/greglone/)
 * (@greglone)
 * [11 years, 6 months ago](https://wordpress.org/support/topic/password-reset-problem-2/#post-5541706)
 * Thanks.
 * I haven’t tried with WPEngine indeed, so I don’t know what it does on the login
   page.
    If some day you have the occasion, maybe you can try to recover a password
   when Move Login is deactivated, and see if there’s something special in the URL.
 * Thanks for the info.
    Greg
 *  Plugin Author [Grégory Viguier](https://wordpress.org/support/users/greglone/)
 * (@greglone)
 * [11 years, 3 months ago](https://wordpress.org/support/topic/password-reset-problem-2/#post-5542094)
 * Version 2.1 is out, I think it will fix your issue.
 *  Plugin Author [Grégory Viguier](https://wordpress.org/support/users/greglone/)
 * (@greglone)
 * [11 years ago](https://wordpress.org/support/topic/password-reset-problem-2/#post-5542117)
 * OK, 3 months, I mark the topic as closed. Please open a new thread if the problem
   persists.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Password Reset problem’ is closed to new replies.

 * ![](https://ps.w.org/sf-move-login/assets/icon.svg?rev=3398811)
 * [SP Move Login](https://wordpress.org/plugins/sf-move-login/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/sf-move-login/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/sf-move-login/)
 * [Active Topics](https://wordpress.org/support/plugin/sf-move-login/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/sf-move-login/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/sf-move-login/reviews/)

 * 5 replies
 * 2 participants
 * Last reply from: [Grégory Viguier](https://wordpress.org/support/users/greglone/)
 * Last activity: [11 years ago](https://wordpress.org/support/topic/password-reset-problem-2/#post-5542117)
 * Status: resolved