WordPress: disable password reset

So you would like to take full control of your WordPress blog's / website's user management, and thus want to disable the password reset function (maybe you only want to allow specific users to access it), and thought it's just one simple function in your functions.php file, and that's it?

Well, it turns out it's a little more than that, otherwise you'll miss the important bits and pieces, and will end up keeping a backdoor open.

So let me share with you the full code that is needed to ensure password reset is disabled completely in your WordPress blog or website:

(click in the box to highlight the code for copy)add_filter ( 'allow_password_reset', 'disable_password_reset' ); function disable_password_reset() { return false; } add_action ( 'login_head', 'remove_password_reset' ); function remove_password_reset() { add_filter( 'gettext', 'remove_password_reset_text' ); } function remove_password_reset_text ( $text ) { if ( $text == 'Lost your password?' ) { $text = ''; } return $text; } add_filter ( 'login_errors', 'remove_password_reset_text_in'); function remove_password_reset_text_in ( $text ) { return str_replace( 'Lost your password</a>?', '</a>', $text ); }