No problem, because Typemill ships with a password recovery as of version 1.4.9. You can activate and configure the password recovery feature in the system settings.
We made the password recovery function as secure as possible. However, a password recovery function has always security implications. Imagine a hacker got access to your email inbox. Then he can reset all your passwords with these kind of password recovery functions. That is why we recommend to use this functionality only if you really need it. For example, if you have a lot of authors or a lot of members and if you cannot make sure that they use a password manager, then a password recovery feature is often needed.
In all other cases we recommend the following alternatives.
Use a password manager
Everybody should use a password manager. You can use the password manager of your browser, or you can use a central password manager like keepass or similar solutions.
Ask users to contact the admin
Instead of providing a password recovery feature, you can also create a separate page and ask your users to contact you in case they lost the password. Just make sure you identify the contact person correctly. Then you can delete and recreate the user in the user management with a new password, for example.
Lost your admin password?
If you are the only admin user and if you lost your password, then you can create a new admin user with the following steps:
- Connect to your website (e.g. via FTP).
- Go to the folder
/settingsand backup the file
- Then delete the file
settings.yamlon your server.
- Go to
- Fill out the form. This will create a new admin user and a fresh settings-file.
- Upload your old settings-file, so your old settings are active again.
- If you haven't done this already, delete the old admin user in the user management screen now.
It might seem a bit inconvenient, but it makes sure that you are the owner of the website.