Skip to content

[Backport v26-branch] Remove plaintext passwords from multisite activation flow#927

Open
github-actions[bot] wants to merge 1 commit intov26-branchfrom
backport-922-to-v26-branch
Open

[Backport v26-branch] Remove plaintext passwords from multisite activation flow#927
github-actions[bot] wants to merge 1 commit intov26-branchfrom
backport-922-to-v26-branch

Conversation

@github-actions
Copy link

@github-actions github-actions bot commented Mar 4, 2026

Description

Backport of #922 to v26-branch.

After account activation, redirect users to the password reset page
instead of displaying the plaintext password on wp-activate.php.
Replace plaintext passwords in welcome emails with a message directing
users to set their password via the login page.

- humanmade/product-dev#2009

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
(cherry picked from commit 264f061)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant