{"id":39252,"date":"2016-02-26T13:00:00","date_gmt":"2016-02-26T19:00:00","guid":{"rendered":"https:\/\/blog.cpanel.com\/?p=39252"},"modified":"2016-02-26T13:00:00","modified_gmt":"2016-02-26T19:00:00","slug":"password-reset-v56","status":"publish","type":"post","link":"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/","title":{"rendered":"Password Reset for All"},"content":{"rendered":"<p>A key feature that has been requested by cPanel Server Administrators, cPanel Users, and End Users (Webmail, FTP, Web Disk) alike, has been the ability to reset passwords without the need for Administrator or Account Owner intervention. We have recently revamped the Password Reset process to enhance its capabilities and extend them to allow Subaccounts to reset their passwords via a self-service process. This means that Webmail, FTP, and Web Disk accounts that have been created using the User Manager, introduced in v54, or have a recovery\/contact email, will be able to take advantage of this self-service capability. \u00a0I ask that you take a look at what we have to offer for Password Reset coming in v56.<\/p>\n<h2>User Experience Enhancements<\/h2>\n<ul>\n<li>The user desiring to reset their password must complete a &#8220;challenge&#8221; by entering the correct recovery\/contact email which is on file with the account. The long dash is meant to indicate an unknown number of characters, so as to obscure the number of characters in the username.<\/li>\n<\/ul>\n<p style=\"text-align: center\"><img decoding=\"async\" class=\"alignnone\" src=\"https:\/\/blog.cpanel.com\/wp-content\/uploads\/2016\/02\/PassReset-Challenge.jpg\" alt=\"PassReset-Challenge\" \/><\/p>\n<ul>\n<li>Security Codes are delivered as a 10 digit numeric code, reducing complexity for users with international keyboards.<\/li>\n<\/ul>\n<p><img decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/blog.cpanel.com\/wp-content\/uploads\/2016\/02\/PassReset-Security.jpg\" alt=\"PassReset-Security\" \/><\/p>\n<ul>\n<li>Rather than generating a new password upon completion, the user is able to set their own desired password.<\/li>\n<\/ul>\n<p><img decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/blog.cpanel.com\/wp-content\/uploads\/2016\/02\/PassReset-Reset.jpg\" alt=\"PassReset-Reset\" \/><\/p>\n<h2>Security Considerations<\/h2>\n<p>While a self-service password reset process is a highly requested feature, the security of this application was a top priority for our project team. Here are a few measures which address some of the most common security concerns:<\/p>\n<ul>\n<li>Upon entering a username which does not exist on the server, the process continues as if the entered username does exist. The &#8220;challenge&#8221; appears and presents a recovery\/contact email which will prevent the end user from determining the existence or non-existence of the entered username.<\/li>\n<li>Each page within the process is given a unique cookie to prevent a user from entering the password reset process out of sequence or from a device other than the one which initiated the reset process.<\/li>\n<li>Flood Control has been extended to prevent a surge of attempts against a single username, blocking additional reset attempts being launched within a given time period.<\/li>\n<\/ul>\n<h2>Custom Themes<\/h2>\n<p>Partners that have cloned and customized the default cPanel Login Theme will need to update their themes in order to use or continue using the Password Reset feature. \u00a0The updates noted above required changes that may break with custom themes. \u00a0We recommend\u00a0that these partners consider utilizing an Edge build of v56 to review and make any necessary changes. In the meantime, the Password Reset option can be disabled easily via a Tweak Setting in WHM.<\/p>\n<h2 class=\"p1\"><span class=\"s1\">Where Does This Take Us?<\/span><\/h2>\n<p class=\"p1\"><span class=\"s1\">As you know, we are leading up to the launch of Sub-Users having the ability to login to cPanel. \u00a0The ability for these users to reset their own passwords has been a key part of the request and we are excited with the progress on this amazing <\/span><span class=\"s2\">feature<\/span><span class=\"s1\">.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A key feature that has been requested by cPanel Server Administrators, cPanel Users, and End Users (Webmail, FTP, Web Disk) alike, has been the ability to reset passwords without the need for Administrator or Account Owner intervention. We have recently revamped the Password Reset process to enhance its capabilities and extend them to allow Subaccounts [&hellip;]<\/p>\n","protected":false},"author":77,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[49],"tags":[],"class_list":["post-39252","post","type-post","status-publish","format-standard","hentry","category-products"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Password Reset for All | cPanel<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Password Reset for All | cPanel\" \/>\n<meta property=\"og:description\" content=\"A key feature that has been requested by cPanel Server Administrators, cPanel Users, and End Users (Webmail, FTP, Web Disk) alike, has been the ability to reset passwords without the need for Administrator or Account Owner intervention. We have recently revamped the Password Reset process to enhance its capabilities and extend them to allow Subaccounts [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/\" \/>\n<meta property=\"og:site_name\" content=\"cPanel\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cpanel\/\" \/>\n<meta property=\"article:published_time\" content=\"2016-02-26T19:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.cpanel.com\/wp-content\/uploads\/2016\/02\/PassReset-Challenge.jpg\" \/>\n<meta name=\"author\" content=\"cPanel Community\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cPanel\" \/>\n<meta name=\"twitter:site\" content=\"@cPanel\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"cPanel Community\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/\",\"url\":\"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/\",\"name\":\"Password Reset for All | cPanel\",\"isPartOf\":{\"@id\":\"https:\/\/devel.www.cpanel.net\/#website\"},\"datePublished\":\"2016-02-26T19:00:00+00:00\",\"dateModified\":\"2016-02-26T19:00:00+00:00\",\"author\":{\"@id\":\"https:\/\/devel.www.cpanel.net\/#\/schema\/person\/8cf97408aad4fb70cf55d11a1d4f57f8\"},\"breadcrumb\":{\"@id\":\"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/devel.www.cpanel.net\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Password Reset for All\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/devel.www.cpanel.net\/#website\",\"url\":\"https:\/\/devel.www.cpanel.net\/\",\"name\":\"cPanel\",\"description\":\"Hosting Platform of Choices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/devel.www.cpanel.net\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/devel.www.cpanel.net\/#\/schema\/person\/8cf97408aad4fb70cf55d11a1d4f57f8\",\"name\":\"cPanel Community\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/devel.www.cpanel.net\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e1949945083b5526bb95711bd3d616b3?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e1949945083b5526bb95711bd3d616b3?s=96&d=mm&r=g\",\"caption\":\"cPanel Community\"},\"description\":\"The web hosting industry's most reliable management solution since 1997. With our first-class support and rich feature set, it's easy to see why our customers and partners make cPanel &amp; WHM their hosting platform of choice. For more information, visit cPanel.net.\",\"sameAs\":[\"https:\/\/cpanel.net\"],\"url\":\"https:\/\/devel.www.cpanel.net\/blog\/author\/cpadmin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Password Reset for All | cPanel","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/","og_locale":"en_US","og_type":"article","og_title":"Password Reset for All | cPanel","og_description":"A key feature that has been requested by cPanel Server Administrators, cPanel Users, and End Users (Webmail, FTP, Web Disk) alike, has been the ability to reset passwords without the need for Administrator or Account Owner intervention. We have recently revamped the Password Reset process to enhance its capabilities and extend them to allow Subaccounts [&hellip;]","og_url":"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/","og_site_name":"cPanel","article_publisher":"https:\/\/www.facebook.com\/cpanel\/","article_published_time":"2016-02-26T19:00:00+00:00","og_image":[{"url":"https:\/\/blog.cpanel.com\/wp-content\/uploads\/2016\/02\/PassReset-Challenge.jpg"}],"author":"cPanel Community","twitter_card":"summary_large_image","twitter_creator":"@cPanel","twitter_site":"@cPanel","twitter_misc":{"Written by":"cPanel Community","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/","url":"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/","name":"Password Reset for All | cPanel","isPartOf":{"@id":"https:\/\/devel.www.cpanel.net\/#website"},"datePublished":"2016-02-26T19:00:00+00:00","dateModified":"2016-02-26T19:00:00+00:00","author":{"@id":"https:\/\/devel.www.cpanel.net\/#\/schema\/person\/8cf97408aad4fb70cf55d11a1d4f57f8"},"breadcrumb":{"@id":"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/devel.www.cpanel.net\/blog\/products\/password-reset-v56\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/devel.www.cpanel.net\/"},{"@type":"ListItem","position":2,"name":"Password Reset for All"}]},{"@type":"WebSite","@id":"https:\/\/devel.www.cpanel.net\/#website","url":"https:\/\/devel.www.cpanel.net\/","name":"cPanel","description":"Hosting Platform of Choices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/devel.www.cpanel.net\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/devel.www.cpanel.net\/#\/schema\/person\/8cf97408aad4fb70cf55d11a1d4f57f8","name":"cPanel Community","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/devel.www.cpanel.net\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e1949945083b5526bb95711bd3d616b3?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e1949945083b5526bb95711bd3d616b3?s=96&d=mm&r=g","caption":"cPanel Community"},"description":"The web hosting industry's most reliable management solution since 1997. With our first-class support and rich feature set, it's easy to see why our customers and partners make cPanel &amp; WHM their hosting platform of choice. For more information, visit cPanel.net.","sameAs":["https:\/\/cpanel.net"],"url":"https:\/\/devel.www.cpanel.net\/blog\/author\/cpadmin\/"}]}},"_links":{"self":[{"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/posts\/39252"}],"collection":[{"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/users\/77"}],"replies":[{"embeddable":true,"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/comments?post=39252"}],"version-history":[{"count":0,"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/posts\/39252\/revisions"}],"wp:attachment":[{"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/media?parent=39252"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/categories?post=39252"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devel.www.cpanel.net\/wp-json\/wp\/v2\/tags?post=39252"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}