Hi @dmanherz ,
Members doesn’t hook into WordPress’s password-set or password-reset flow at all — the “set your password” link that goes out when you create a new user is core WordPress, so the failure is almost certainly coming from elsewhere on the site.
The exact wording of the error would narrow this down a lot. “Your password reset link appears to be invalid or has expired” is a different problem from “The username or password you entered is incorrect” — the first means the reset key isn’t validating, the second means they’ve landed on the normal login form instead of the set-password screen and are typing in a password that was never saved.
A few things worth ruling out in the meantime:
- Those links are single-use and expire after 24 hours, and requesting a new one invalidates the previous one. Delayed email or a second request will produce the invalid-link error on its own.
- Check that the URL in the email matches your site address exactly — www vs non-www, http vs https. WordPress sets a temporary cookie on that link, and if the address they end up on doesn’t match, the key gets dropped and the screen fails.
- Page caching or a CDN caching wp-login.php will break this, as will plugins that hide or protect the login page (WPS Hide Login, Wordfence, Solid Security, etc.). If you have any of those running, try temporarily disabling them and creating a test user.
If it’s still happening after that, can you post your WordPress version, your Members version, whether it persists with other plugins deactivated, and a screenshot of the error screen? That’ll confirm whether there’s anything on our side.
Regards,
