WordPress 2.5.1 was released with over 80 security/bug fixes, and lots of performance enhancements. However, there was one bug, that crept up right after its release. According to a ticket filed in WordPress Trac, when a user resets their password, the password reset link received in the email does not work. The error message that is received looks like this "Sorry, that key does not appear to be valid."
This bug has been fixed and will be included in WordPress 2.5.2. However, if you've upgraded to 2.5.1 and having issues with password reset, you can do password reset, with any of following ways:
- Login to your PhpMyAdmin account, and select your WordPress database.
- Select & browse wp_users table, look for the username, you want to reset the password and click on the edit icon next to your username.
- Once the edit page is open, select MD5 from the Function dropdown next to the user_pass row. Change the value on the user_pass row to your new password and then hit Go.
- Now fireup your WordPress admin panel, and login with your new password and it will upgrade your password to the new phpass hashing.
- Or, if you've only single user on your WordPress installation, and the login name is admin. You can reset password with just simple SQL query, which once executed will replace password with whatever you enter as your new password to be.
UPDATE 'wordpress'.'wp_users' SET 'user_pass' = MD5('PASSWORD') WHERE 'wp_users'.'user_login' ='admin' LIMIT 1;
- If you're not comfortable with PhpMyAdmin or you don't to do it manually, as an alternate, you can download files which contain the patch, here.