If a user forgets their password and doesn't know how to reset it, you can either reset it as the admin or you can explain how they can reset their password on the storefront.
Resetting Users' Password as an Admin
Navigate to People
Find and edit the user you need to reset the password for
Click the ellipsis (...)
Select Manage Password
A pop-up should appear displaying the options
Password Requirements
Minimum of 8 characters
Maximum of 128 characters
Case sensitive (uppercase and lowercase letters are treated differently)
No restrictions on special characters or spaces
Password Reset Instructions
As a store admin, there are various ways to reset a user's password or assist them.
Option 1: Manually Set a Temporary Password
You can manually reset the password for the user, providing them with a temporary password that they may change once they've logged in.
Fill out the fields with the new password
Click Save
💡 TIP: Feel free to share the temporary password with the customer and advise them to update it later once they've logged in.
Option 2: Send a Password Reset link
You can send a password recovery link to the email address registered in the user's account.=
Click the Send email link to user button
Inform the user to check their inbox for the password reset link
The user should receive an email with an embedded link to reset their password.
Once the user has successfully changed the password, the confirmation will redirect them to the storefront's home page.
Option 3: Copy & Share the Direct Password Reset link
You can click Generate Link, followed by Copy Link, and share the copied password reset link directly with the user.
Accessing the direct link will instantly provide the user with the option to set a new password.
💡 TIP: This method does not require entering the user's old password.
Option 4: Impersonate and Update the Password
If you know the user's current password, you can impersonate the user to update their password.
🔗 Learn more about User Impersonation
While impersonating the user, access the Profile page (.../account/profile). Scroll down a bit and find the option at the Secure sign-in section.
🔗 Learn more about the User Dashboard: Profile
📝 NOTE: This option requires the current password. If the user does not provide the current password, you may consider using one of the other options.
Option 5: Forgot Password Page
You can quickly visit the Forgot Password page (.../forgot_password), enter the email address of the user, and click Send Instructions.
This sends a Password Reset link to the entered address via email, similar to Option 2 above.
📝 NOTE: Password reset links can expire after an hour and are one-time use only. For security reasons, these links are intentionally short-lived, which is why users should click them as soon as they can after the request. If users take too long to click the link or try to use it multiple times, they will likely receive an error message stating the link is invalid.
FAQs
Why is the password reset link showing as "invalid" or "not valid"?
Why is the password reset link showing as "invalid" or "not valid"?
Password reset links expire after one hour and are one-time use only for security reasons. The link may be invalid because it has expired (after 1 hour), was already used, the user waited too long to click it, the user is trying to use an old reset link from a previous attempt, or the link was corrupted if it wasn't copied properly when sharing manually. To resolve this, request a new password reset link and use it immediately after receiving it.
What if the user doesn't receive the password reset email?
What if the user doesn't receive the password reset email?
Have them check their spam folder or confirm they entered the correct email. Other common causes include email delivery delays (wait a few minutes), bounced emails due to server issues on their email provider's end, or using the wrong email address.
Can users sign in without a password?
Can users sign in without a password?
Yes! Users can use the Magic Sign-In Link option instead of password reset. This is a passwordless sign-in method where they enter their email address on the sign-in page, select "Send me a Magic Sign In Link," check their inbox, and click the link to sign in automatically. Magic Sign-In Links are available for the website, iOS, and Android apps. 🔗 Learn more about Sign-in Options
What if a new member hasn't set a password yet?
What if a new member hasn't set a password yet?
New members who joined via a link and don't have a password yet can use the options above to set their first password. The reset password process works for both resetting existing passwords and creating initial passwords.