Drupal is a registered trademark of Dries Buytaert
Release: Leaflet 10.4.11 Minor update available for module leaflet (10.4.11). Release: Session Inspector 1.0.8 Minor update available for module session_inspector (1.0.8). Release: Migrate QA 2.0.4 Minor update available for module migrate_qa (2.0.4). Release: CKEditor Description List 3.0.0 Major update available for module ckeditor_descriptionlist (3.0.0). Release: FlowDrop 2.4.0 Minor update available for module flowdrop (2.4.0). Release: JWT Token Refresh 1.0.4 Minor update available for module jwt_token_refresh (1.0.4). Release: ConReg 1.0.0-beta1 First beta version released for module conreg (1.0.0-beta1). Release: AI Image Studio 1.0.0-beta8 New beta version released for module ai_image_studio (1.0.0-beta8). Usage Milestone: Statistics Counter Module statistics_counter crossed 1,000 active installs. Module Revived: Decoupled Router 2.0.7 Module decoupled_router updated after 11 months of inactivity (2.0.7).

Simple Password Reset

3,924 sites Security covered
View on drupal.org

This module streamlines the Drupal password reset process by taking users directly to the password change form, bypassing an intermediate login step. It also logs users out if they use a password reset link from their account settings, preventing access denied errors and reducing support requests.

This modules simplifies the password reset process.

Without this module enabled, core Drupal prompts the user to log in via a one-time login form. After clicking "Log in", the user is brought to their profile edit form where at long last they can change their password.

With this module enabled, the user skips the one-time login form. Instead the password reset link brings them right to the profile edit form where they can immediately change their password and log in. So what core Drupal does in two steps, this module does in one.

Additionally, this module now logs a user out who uses the password reset form linked from the account edit form. This prevents those users from seeing an access denied message when they follow the password reset link that gets e-mailed to them, reducing customer support inquiries during password resets.

This module works out-of-the-box but allows to set a login redirection if needed
at /admin/config/people/accounts/simple_pass_reset.

Usage tips

This module also provides an option to show a "brief" version of the password reset form. So the user is prompted only to change their password. This eliminates the confusion many users experience with the current process. To enable the brief form, you must update the email bodies in your site's account settings form to change any instance of [user:one-time-login-url] to [user:one-time-login-url]/brief. (This feature available only in D7 version. In D8, by default it provides only password field alone)

If you are using any CAPTCHA related modules to protect forms on your site, we recommend disabling the CAPTCHA elements on the password reset form, especially if your users must clear a CAPTCHA to request a new password to begin with. The only accommodation this module currently makes is to not hide form elements added to the brief password reset form of the captcha element type defined by the CAPTCHA module.

Related modules

Another project has been pointed out to me, called PRLP. The two modules are quite similar and may join forces at some point. There's a subtle technical difference that might help you decide which to use. The PRLP relies on hook_form_alter() to change the one-time login form, and to that form it adds password and other elements from the user profile form. Simple Password Reset, on the other hand, relies on hook_menu_alter() to do away with the one-time login form entirely, it builds the user profile form instead.

In case that last sentence made no sense to you, consider this: if you have a third party module that alters the profile edit form, this module will include those alters when a user is setting their password. While the PRLP module will not include those alters (third-party modules would have to alter the one-time login form in addition to the profile edit form).

Activity

Tracked releases
1
Tracked since
Jul 2026
Latest release
1 month ago
Releases (12 mo)
1 ▲ from 0
Maintenance
Active

Releases

Version Type Release date
2.0.1 Stable Jul 6, 2026