WHMCS 8 removed the ability for administrators to change a user's password from the admin area. Change User Password puts it back, safely and with every action recorded.
Change a password straight from the client profile or from the Manage Users dropdown, generate a strong password with one click, and optionally email it to the user so they can log in right away.
This release makes the module's modal endpoints POST-only with CSRF validation. Opening an endpoint URL directly in the browser now returns the standard WHMCS HTTP Method Not Allowed page, just like WHMCS core routes. CSRF checks also go through one shared, fail-closed helper, so the modal shows a clean error instead of a raw response.
Access control now uses the built-in WHMCS Access Control list, and existing role lists are migrated automatically. The dashboard has been redesigned with total, monthly and daily reset counters, a quick action bar, a 7 / 30 / 90 day or all-time filter, and a new Reset Trend chart. Endpoints are now root-relative so they work from WHMCS 9 pretty admin URLs, and security was hardened across all endpoints and files.
You can now choose which character types the password generator uses (letters, numbers and symbols), and passwords are generated with a cryptographically secure random source. This release also fixes the Generate button and the CSRF token on the save form, so new passwords save correctly.
We also offer full source code licenses for all of our products. Source code access for Change User Password is available for $200 USD. Please contact our support team for further details or to request a purchase.
The best place to start if you need help with a specific product is to contact the developer. All WHMCS Marketplace developers have both a website and support URL listed.
a=index) is now POST-only with a CSRF token, like WHMCS core routesrandom_int() + Fisher-Yates) instead of str_shuffle()
a=store and a=password now returns the WHMCS 405 page instead of a bare JSON errora=store and a=password use the same CSRF helper.htaccess rules, and generic activation and deactivation errors
Sell SSL on autopilot: automated issuance, validation, installation and renewal, right inside WHMCS.
Easily generate and change passwords for your clients without the need to send an email
Give your customers the power to unblock themselves from the CSF Firewall! Lessen your staff support ticket load
Hosting VPN @hosting4151
The price is good but they do not reply to your support tickets either in a timely manner if at all
Web Host Pro @webhost5354
This does not work and they will not refund you.
HardSoftCode Teams @HardSoftCode
Hi
Owner@HardSoftCodeYou have a problem with WHMCS our support staff try to help you with the problem but you refuse and ask for refund
Arjen Kocken @arjen4010
Thanks for this addon! I'm in the middle of a migration, to migrate a lot of customers to the new portal and they can't receive a password reset mail after the mail migration. Off course we let the customers know a long time before, that we will migrate.. But some users don't check email, I think :-)
This module will really help me to send them the last mail, in the current mailbox. To tell them they are migrated and need to login to the portal with the password I can set now!
Thanks, saving me a lot of time, money well spend!
Is a v8.1 version comming?
HardSoftCode Teams @HardSoftCode
Hi Arjen
Owner@HardSoftCodeThank you for the review. I just want you to know that the module works with v8.1.x
Givanildo Santos @givanildo7305
One of the best developers to work with whmcs. we already have more than 8 specific addon projects working very well!
this is really the best when whmcs limits the lives of providers.
Congratulations on working with clean code and no compilation at all.
Giovanna @giovanna9612
It worked just right, it saved our work, customers who don't remember the secret answer get stuck without this function.