On a schedule, send a password reset email to every WordPress user of a role
On the schedule you set, FlowMattic loads every WordPress user with the role you pick, loops through them and sends each one WordPress’s standard password reset email.
Schedule
WordPress
Iterator4 steps Setup ~8 min Used on 952 sites Free to import
What this workflow does
Sites with shared editor or shop manager accounts sometimes ask those users to choose a new password at regular intervals. Sending the reset emails by hand from the users screen is tedious when there are many accounts. This workflow sends them for one role at a time, on a timer.
The Schedule trigger ships as Every Day with no time set. Daily resets are a lot for most sites, so after import choose the interval you actually want, such as Every Month, and the time. The WordPress Get All Users by Role step then loads every user with the role you enter and returns them as a list. Without a role it returns an error, so set it before turning the workflow on.
An Iterator loops through that list, one user at a time. Its array field is empty in the template, so map the users list from the previous step into it. The last step, Send Password Reset, takes a username or email address; map the current user's login or email from the Iterator.
Each email is WordPress's usual reset message with a link to choose a new password. Their current password keeps working until they use the link, so this asks people to rotate rather than forcing it. Every run emails every user in the role again.
Monthly rotation for editors
A publication's editors get a reset link once a month, with the schedule set to Every Month and the role set to editor.
Shop manager accounts on a store
A WooCommerce store with several shop managers asks them all to choose a new password at the start of every month.
Client sites with custom roles
An agency managing a client portal sends reset links to every user of a custom client role on a set schedule.
How this workflow runs
What happens at each step once the workflow is on, and what you need before you import it.
Schedule Every DayStarts the workflow on a schedule. It ships as Every Day without a time, so change it to the interval and time that suit your password policy.
- WordPress Get All Users by Role
Loads all WordPress users who have the role you enter, returned as a list without their passwords. Enter the role after import; the step returns an error if it is empty or no users have it.
- Iterator Loop Through Array
Loops through the users list and runs the password reset step once for each user. The array is empty in the template, so map the users list from the Get All Users by Role step.
- WordPress Send Password Reset
Sends WordPress's standard password reset email to the user, with a link to choose a new password. Map the current user's username or email address from the Iterator into it.
What you need
- FlowMatticCore
After importing, map your own data. To keep the template universal, not every step is pre-filled. Open each step in the builder and connect your accounts and fields (channels, lists, sheets, recipients) before you switch the workflow on.
Make it yours
Changes worth making after you import it.
- Change the Every Day schedule before you switch the workflow on, or every user in the role gets a reset email each day.
- Run the workflow once with a test role that holds only your own account, and check Task History to confirm the reset email arrives.
- Put a Filter between the Iterator and the Send Password Reset step that skips your own administrator email, if that account shares the role. The loop then moves on to the next user.
- Tell users in advance that the reset emails are expected, so they don't mistake them for a phishing attempt.
Questions about this workflow
Does the WordPress password stop working when the reset email is sent?
No. The step creates a reset link and emails it. The user's existing password keeps working until they follow the link and set a new one.
What does the password reset email say?
It is WordPress's usual message: it names the site and username, says a reset was requested, tells the user to ignore it if it was a mistake, and gives the reset link. The subject reads "[Your site name] Password Reset".
Can I send resets to more than one WordPress role?
The Get All Users by Role step loads one role per run. Import the workflow a second time for another role, or add a second Get All Users by Role step with its own Iterator.
Will users of the role get the email on every scheduled run?
Yes. Nothing records who was emailed before, so each run sends a reset link to every user who has the role at that moment.
More Developer Tools workflows
Other ready-to-import templates from the same category.
Import this workflow into your WordPress site
Download the JSON, import it from the Workflows screen and connect your accounts. Every run stays on your server, with no per-task fees.
30-day money-back guarantee Unlimited workflows and runs Self-hosted