WordPress.org

Forums

Simple User Password Generator
need option to see generated password (3 posts)

  1. Donna McMaster
    Member
    Posted 1 year ago #

    It is simple to use and generates great passwords. I like it isn't just for creating new users; people can use it to update their own passwords as well.

    My only concern is that there is no way to see the password that is being generated. You must ask WP to send it through the mail, which is in itself a security hole. If there was the option to see the generated password, this would be a 5-star plugin for sure.

  2. Jake Goldman
    10up Engineer
    Plugin Author

    Posted 1 year ago #

    I would dispute your claim that sending the password to an email address is a security hole when WordPress lets anyone reset their password with just their email address.

    On the other hand, displaying it in a visible non-password field opens the door for onlookers or screen capture / recording malware to capture the input.

  3. Donna McMaster
    Member
    Posted 1 year ago #

    Onlookers and malware are threats that I can control. I work in a secured environment, not a coffeeshop. I agree with you that the password should be hidden by default, but I would like to you trust me when I say it's safe for me to see it. :)

Topic Closed

This topic has been closed to new replies.

About this Plugin

  • Simple User Password Generator
  • Frequently Asked Questions
  • Support Threads
  • Reviews

About this Topic

Tags

No tags yet.