Friendlier Password Reset Email
Replaces the wording of the password reset email with a clearer message and subject, keeping the reset link intact.
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Friendlier Subjects for Account Emails
Gives WordPress's new account, password changed and email address changed emails friendlier subjects of your own, without touching the rest of the message.
Front-End Change Password Form
Adds a [wpide_change_password] shortcode where members change their password by entering the current one and the new one twice, and stay logged in afterwards.
Help Text in the MemberPress Login Form
Adds a short hint above the MemberPress login button with a link to reset the password, which cuts down on "I can't log in" emails.
Helpful Message on the Lost Password Form
Shows a short explanation above the lost password form telling people what will happen next and where to get help if the email does not arrive.
Hide Links on the Login Page
Removes the "Go to site", "Lost your password?" and privacy policy links from the login screen, each one switchable on its own.
Hide Password-Protected Posts From Search
Leaves password-protected posts and pages out of search results so their titles are not exposed to visitors.
Hide Whether an Account Exists on Password Reset
Shows the same "check your email" screen for unknown usernames and emails on the lost password form, so it cannot be used to find valid accounts.
Honeypot Trap on the Lost Password Form
Adds a hidden field to the lost password form that only bots fill in and silently ignores those requests, so bots cannot flood your users with reset emails.
Keep Password-Protected Posts Out of Feeds
Removes password-protected posts from all feeds, where they otherwise appear with a "There is no excerpt because this is a protected post" message.
Let New Users Choose Their Password When Registering
Adds password and confirm-password fields to the WordPress registration form, so new members pick their own password instead of waiting for a "set your password" email.
Limit Guesses on Password-Protected Posts
Allows each visitor at most 10 password attempts on password-protected posts and pages every 15 minutes, which stops bots from brute-forcing the post password.
Limit Password Reset Requests
Allows only a few password reset requests per hour from the same IP address, which stops reset-email flooding.
Load the WooCommerce Password Strength Meter Only When Needed
Removes the password strength meter script (about 400 KB with its dictionary) from every page except the account, checkout and password reset pages where customers actually choose a password.
Lock Accounts That Haven't Been Used for Months
Blocks logins from accounts that have been inactive for a long time (180 days by default) until they reset their password, which protects forgotten accounts.
Log In With Email Address Only
Accepts only an email address and password on the login form. Usernames are rejected, which makes guessing logins harder.
Lost Password Form on Your Own Page
Adds a [wpide_lost_password] shortcode with a "reset your password" form and points WordPress's "Lost your password?" links to the page that holds it.
Make New Users Change Their Password on First Login
When an administrator creates an account, the new user is sent to their profile and asked to choose a new password before they can use the rest of the site.
Noindex Password-Protected Posts and Pages
Adds noindex to posts and pages that need a password, so search engines do not list pages whose content they cannot see.
Password Reset by Email Address Only
Makes the "Lost your password?" form accept only an email address, not a username, so the form can't be used to probe which usernames exist.
Passwordless Login With an Email Link
Adds an "Email me a login link" option to the login screen; members enter their email or username and get a one-time link that logs them in for 15 minutes.
Placeholders in Login Form Fields
Adds hint text inside the username, password and email fields on the login, lost password and registration screens.
Prevent Reusing Any of the Last 5 Passwords
Remembers the last five password hashes of each user and refuses a new password that matches one of them, on the profile screen and on password reset.
Private Site Statistics REST Endpoint
Adds a /wp-json/site/v1/stats endpoint that returns post, page, comment and user counts to logged-in editors or application-password clients, for reporting tools and status boards.