The affiliate password reset in Ultimate Affiliate Pro works in two emails: first the affiliate confirms the request with a link, then they receive a new password and log in with it. Affiliates never need access to the WordPress login screen.
The confirmation step makes sure that only the owner of the email address can reset the password. This guide shows the full flow, the emails to set up and how affiliates change the new password afterwards. The reset page itself is one of your default pages; see Set up the registration, login and password pages.
Before you start
- A Lost Password Page with the
[uap-reset-password]shortcode, selected in Settings›Pages Setup. - Display Lost your password link on in Showcases›Login Form (on by default).
- Your site can send email. See Email notifications.
How the reset works #
- 1. Request
- Emma clicks Lost your password? on the login form and enters emma.collins or her email address.
- 2. Confirm
- She receives the Step 1 email and clicks its link. The link works for one hour.
- 3. New password
- She receives the Step 2 email with a new password of 10 characters.
- 4. Log in
- She logs in with it and sets a password of her own in the Affiliate Portal.
The affiliate requests a reset #
The Lost your password? link on the login form opens your Lost Password Page. Its look follows the login form template.
- The affiliate enters their username or the email address of their account.
- They click Reset Password. The page shows a success message and the confirmation email is sent.
Both messages are in Showcases›Login Form›Custom Messages, in the Reset Password Messages card: Successfully Message and Error Message, shown when no account matches what was typed.
Set up the reset emails #
Go to Ultimate Affiliate Pro›Email Notifications. Create or edit a notification for each step, and pick the step in When should this notification be sent?.
Sent after the affiliate submits the reset form. It must contain the {password_reset_link} tag; the ready-made template has a Reset My Password button with it.
Sent after the affiliate clicks the confirmation link. It must contain the {NEW_PASSWORD} tag with the new password.
Optional. Sent instead of the standard WordPress “password changed” email when an affiliate’s password is changed from a WordPress profile screen.
Choosing a trigger loads a ready-made subject and message that you can edit. Click Create Notification and use Send Test Email to check the result. If a Step 1 or Step 2 notification is not set up, Ultimate Affiliate Pro still sends a plain email with the link or the new password.
Choose where the confirmation link leads #
After the affiliate clicks the confirmation link, they go to your homepage. To send them to your login page instead, go to Ultimate Affiliate Pro›Settings›Redirects Setup, select the page in After Reset Password and click Save Changes. Add a short note on that page, such as “Check your inbox for your new password”.
The affiliate changes the new password #
After logging in with the generated password, the affiliate opens Change Your Password in the Affiliate Portal profile menu. They type the current password (the one from the email), the new password twice, and save.
Tip
You can also reset a password for an affiliate yourself. In Users›All Users, open the user and use Set New Password or Send Reset Link in the Account Management section. For more about this screen, see the WordPress profile documentation.
Test it #
- In a private browser window, open the login page and click Lost your password?.
- Enter the email of a test affiliate whose inbox you can read and click Reset Password.
- Click the link in the first email within one hour, then log in with the password from the second email.
Want the reset link to open a page of your site with a Change your password form? Use the Manage Reset Password add-on.
Frequently asked questions #
How can an affiliate reset their password?
They click Lost your password? on the affiliate login form, enter their username or email, confirm the request from the email they receive, and then log in with the new password sent in a second email.
How long is the reset link valid?
One hour. After that, the affiliate submits the reset form again to get a new link.
The affiliate did not receive the reset email. What should I check?
Check the spam folder, then send a test email from Email Notifications. If test emails do not arrive either, set up an SMTP plugin. See Emails are not sent.
Can affiliates choose their new password directly?
They receive a generated password first, then set their own in Change Your Password in the Affiliate Portal.
Can I change the texts of the reset page?
Yes. Edit the page content around the shortcode for the introduction, and the Reset Password Messages in Showcases, Login Form, Custom Messages for the success and error messages.
