Altering the 'forgot password' behavior?

Question

Under our login form, I have a 'forgot password' link which goes to the native EE page for this: /members/forgot_password. When the link is clicked:

• EE sends an email to the user.
• User clicks on link.
• EE resets password to something random.
• EE emails new password to user.

I'd like the change this sequence so the user can create a new password. How would I do this?

Thx.

Answer 1

There are at least two add-ons which will allow the password reset to work as you described, with the user entering their own password:

FreeMember
See the reset_password tag

The Reset Password tag allows users to change their password directly, after they click the link in their email.

OR

Securit:ee
See the forgot_password tag

Instead of resetting a password Securit:ee sends a confirmation code, that auto expires, and allows users to set their own passwords