Password Security

Hi,
sorry, this may be a stupid question, but…
the the Docs it says that it is recommended to use the Password Reset Link option, because it’s more secure. But when I do so, and re-direct the USer to a Custom page where I use the Pro Form to reset the password, why is that more secure than if I directly use the Form to update the password? :thinking:

The Password Reset Link uses the default Wordpress behavior and pages to update passwords. In that case, there is no second Pro Forms instance. Everything is managed by WordPress :slightly_smiling_face:

Yes, but if I change the default WordPress Reset Page to a Custom Page in the Bricks settings, will I loose the advantage of the secure WordPress reset page? I guess yes, right!?
But going with the default WordPress Reset Password Page isn’t an option neither, cause this looks unprofessional. Hm…

Changing the password diriectly with Pro Forms is secure as well. The other method is just even more secure, because an email is also sent to the user. But if you’re fine with it, of course, you can also update it directly with Pro Forms. :slightly_smiling_face:

ah, okay, it’s just the email that makes the difference. If I use the native WordPress Reset Page or the custom Page with a Pro Form doesn’t matter, right!?
So in my case I have a page where the user can reuest a password reset link → link will be. sent out → link will lead to a custom page with the Pro Form to reset the password. All good.