Password Reset/Recovery process (documentation)
I want to clarify for other customers, how I think the Password Reset/Recovery process works. I learned this by experimentation on CP 3.3.1:
ClassiPress has the following 2 pages:
1) Password Recovery
2) Password Reset
Password Recovery
The text on the page says, "Please enter your username or email address. A new password will be emailed to you."
This page has a single textbox, in which the user can enter his or her username or email address.
That text can be misleading; as the site does not email a new password to the user at this point.
Rather, the user will receive an email containing the URL that leads to the Password Reset page, with some unique codes embedded in it.
Password Reset
The text on the page says, "Enter your new password below."
This page has two textboxes, in which the user can enter his or her new password twice.
When the user submits the form, his or her password will change from whatever it is, to the value he or she entered into the form.