Password Reset Reminder

The Password Reset Reminder Module for Magento 2 Keep your customers accounts secure, with this powerful tool automatically prompts users to update their passwords at intervals you set, reducing fraud risks while demonstrating your commitment to account safety. By proactively protecting shoppers, you'll build trust that converts to loyalty and sales—all with zero manual effort. Add this essential security upgrade today and turn peace of mind into profits!

Features

• Option to Enable/Disable
• Frequency settings determine how many days after the last password reset an email reminder should be sent.
• Option to define password resetter email subject to grab customer attention
• Option to choose an admin sender 
• Option to customize email templates
• At the time of module installation, the module saves the last customer's updated time stamps and uses them against the above frequency settings to send password reset reminder emails
• Every Midnight cron job will send reminder emails all matching customers
• This module saves the sent reminders to stop any duplicate emails 
• When a customer fails to reset their password after receiving an email, the module logs the original send date as the last updated timestamp, allowing follow-up reminders per the schedule. 

Installation Instructions

There are 2 ways to install after purchasing the module

• Composer installation:
  composer require magekwik/module-passwordresetter
• Direct Files Installation:
  Upload the downloaded package inside the following directories using their names.
  
  The base module will go inside - app/code/Magekwik/Base
  RelatedCategories will go inside - app/code/Magekwik/PasswordResetter 

Once installation is done, please run the following commands in the sequence.

bin/magento setup:upgrade

bin/magento setup:di:compile

bin/magento setup:static-content:deploy

Why Resetting Passwords is Needed:

Preventing Unauthorized Access

• If someone steals or guesses your password, changing it regularly limits their ability to misuse your account.
• In case of a data breach (where passwords are leaked), resetting your password locks out hackers.

Mitigating Credential Stuffing Attacks

• Many people reuse passwords across multiple sites. If one account is compromised, attackers try the same credentials elsewhere.
• Resetting passwords ensures that even if one account is breached, others remain safe.

Revoking Access from Old Devices

• If you logged in on a public or shared device and forgot to log out, changing your password forces all sessions to re-authenticate, kicking out intruders.

Staying Ahead of Keyloggers & Spyware

• If malware records your keystrokes (including passwords), regularly updating your password reduces the attacker’s window of opportunity.

Complying with Security Policies

• Many organizations enforce periodic password changes to maintain security standards (though some now prefer strong, long-lasting passwords with multi-factor authentication).

How Password Reset Saves Your Account:

• Locks Out Hackers – If an attacker gains access, resetting the password immediately cuts off their entry.
• Updates Security – A new, strong password is harder to crack than an old, reused, or weak one.

Best Practices for Password Resets:

• Use a strong, unique password (mix of letters, numbers, symbols).
• Avoid reusing passwords across different sites.
• Change passwords immediately if you suspect a breach.

By resetting passwords proactively (or after a security incident), you significantly reduce the risk of account takeover and data theft.