# Reset password URL is /password-reset

**URL:** https://meta.discourse.org/t/reset-password-url-is-password-reset/28072
**Category:** Bug
**Created:** [April 29, 2015, 7:26am UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072 "2015-04-29T07:26:02Z")
**Posts on this page:** 15
**Page:** 1

<div class="post-metadata">

### Author: ![watchmanmonitor](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/watchmanmonitor/32/430970_2.png) [@watchmanmonitor](https://meta.discourse.org/u/watchmanmonitor)
#### Post date: [April 29, 2015, 7:26am UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/1 "2015-04-29T07:26:02Z")

</div>

I’m using @vindia’s script here:

[https://github.com/vindia/discourse\_user\_importer/](https://github.com/vindia/discourse_user_importer/)

To import users into a forum. They will all have to reset their password to get in and make changes.

Is there a URL I can send them to to reset this directly? Something like `/my/password` or `/reset-password`?

Thanks!

---

<div class="post-metadata">

### Author: ![vindia](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/vindia/32/72197_2.png) [@vindia](https://meta.discourse.org/u/vindia)
#### Post date: [April 29, 2015, 12:59pm UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/2 "2015-04-29T12:59:48Z")

</div>

Not as far as I know. I just mailed them instructions to go to “Login” and then “Forgot password”, so Discourse will sent them the right password reset mail. It’s a bit clunky, I admit.

---

<div class="post-metadata">

### Author: ![watchmanmonitor](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/watchmanmonitor/32/430970_2.png) [@watchmanmonitor](https://meta.discourse.org/u/watchmanmonitor)
#### Post date: [April 29, 2015, 2:06pm UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/3 "2015-04-29T14:06:41Z")

</div>

As I bulk-add these users, I’d love to be able to point them to the URL where they can reset their password (as opposed to manual words.. “Go to the login page, click Login, click Reset password”

It’s more friendly in any set of written instructions about Discourse and its usage. Not high priority, but a nice touch, and I would expect not too hard to implement [for someone who has more skills than I].

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [April 30, 2015, 1:48am UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/4 "2015-04-30T01:48:47Z")

</div>

@neil didn’t we add a route for this to support existing customers with a bunch of migrated accounts that need to reset password to get in?

---

<div class="post-metadata">

### Author: ![riking](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/riking/32/170938_2.png) [@riking](https://meta.discourse.org/u/riking)
#### Post date: [April 30, 2015, 2:46am UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/5 "2015-04-30T02:46:54Z")

</div>

I think issuing the password resets with an admin authorization (api\_key + api\_username=system) would work for bypassing the rate limits.

---

<div class="post-metadata">

### Author: ![neil](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/neil/32/102150_2.png) [@neil](https://meta.discourse.org/u/neil)
#### Post date: [April 30, 2015, 2:44pm UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/6 "2015-04-30T14:44:02Z")

</div>

> [@codinghorror](#):
>
> didn’t we add a route for this to support existing customers with a bunch of migrated accounts that need to reset password to get in?

Yes we did! The path is `/password-reset`. @watchmanmonitor You almost had it right. 😄

---

<div class="post-metadata">

### Author: ![watchmanmonitor](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/watchmanmonitor/32/430970_2.png) [@watchmanmonitor](https://meta.discourse.org/u/watchmanmonitor)
#### Post date: [April 30, 2015, 7:10pm UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/7 "2015-04-30T19:10:30Z")

</div>

Hi

I’m not able to make it work on my invite-only forums. I just get redirected to the login page.

I does work here on meta.. updating this to “bug”

---

<div class="post-metadata">

### Author: ![cpradio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cpradio/32/4970_2.png) [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [April 30, 2015, 7:12pm UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/8 "2015-04-30T19:12:00Z")

</div>

Are you on latest?

As it works at Sitepoint. It does redirect back to /latest, but it brings up the Password Reset modal.

 ![](https://global.discourse-cdn.com/meta/original/3X/e/6/e66f767f312b5506e1874c1f012e62278fbc962d.png)

---

<div class="post-metadata">

### Author: ![watchmanmonitor](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/watchmanmonitor/32/430970_2.png) [@watchmanmonitor](https://meta.discourse.org/u/watchmanmonitor)
#### Post date: [April 30, 2015, 7:38pm UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/9 "2015-04-30T19:38:05Z")

</div>

I tested it on my hosted “cider cooler” site before breaking out the B word 🙂

and I just updated another site to latest, same lack of reset, on these closed forums, where registration is possible.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [May 1, 2015, 1:12am UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/10 "2015-05-01T01:12:50Z")

</div>

So I guess it has to do with invite only. What is the exact repro?

---

<div class="post-metadata">

### Author: ![watchmanmonitor](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/watchmanmonitor/32/430970_2.png) [@watchmanmonitor](https://meta.discourse.org/u/watchmanmonitor)
#### Post date: [May 1, 2015, 1:20am UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/11 "2015-05-01T01:20:25Z")

</div>

Invite only = unchecked  
login required = checked  
must approve users = checked  
enable local = checked  
allow new users = checked

google, twitter, facebook logins all enabled, no SSO in place.

Going to forum/password-reset looks a bit jerky, as if the reset modal were displayed, but a user just gets the normal signup/login page.

I flagged this thread with the hosted URL you can repro on

---

<div class="post-metadata">

### Author: ![neil](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/neil/32/102150_2.png) [@neil](https://meta.discourse.org/u/neil)
#### Post date: [May 1, 2015, 3:28pm UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/12 "2015-05-01T15:28:04Z")

</div>

The /password-reset route was definitely broken when login required is enabled. I pushed a fix for that, and also fixed it always trying to go to the “latest” page.

---

<div class="post-metadata">

### Author: ![watchmanmonitor](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/watchmanmonitor/32/430970_2.png) [@watchmanmonitor](https://meta.discourse.org/u/watchmanmonitor)
#### Post date: [May 1, 2015, 3:45pm UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/13 "2015-05-01T15:45:45Z")

</div>

confirmed working on the site where this came up. thanks for the fast fix!

PS does your like on a topic comment count for ` Senior Tester` badge I’m working on? 😉

---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [May 1, 2015, 3:50pm UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/14 "2015-05-01T15:50:51Z")

</div>

> [@watchmanmonitor](#):
>
> PS does your like on a topic comment count for Senior Tester badge I’m working on?

Nope. That badge works only for topics (ie. `post_number == 1`).

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [May 2, 2015, 2:19am UTC](https://meta.discourse.org/t/reset-password-url-is-password-reset/28072/15 "2015-05-02T02:19:58Z")

</div>


