Table of contents
Why customize your WordPress password reset forms?Option 1: Customize password reset forms with a pluginOption 2: Customize reset forms manually with codeKey elements to check when customizingPro tip: Customize password reset emails tooNext stepsAdditional resources
Get the industry’s fastest hosting for WordPress◦ 99.999% uptime
◦ Comprehensive security
◦ 24/7 support
Explore options

WordPress Guide → Build → Customize Password

How to customize a password reset/lost form in WordPress

Many WordPress sites stick with the default password reset form—but it’s not ideal for branding, user experience, or conversions. You can easily customize it using a plugin or with some code. 

Let’s walk through both options and cover everything from design tweaks to full-page redirects.

Get fast, reliable hosting for WordPress

Power your site with the industry’s fastest, most optimized WordPress hosting

WordPress.org hosting

Why customize your WordPress password reset forms?

Before jumping into how, it helps to understand why this tweak matters.

  • Brand consistency: The default /wp-login.php forms look generic and don’t reflect your brand’s identity.
  • User experience: Custom styling and messaging help guide users through the reset process with less confusion.
  • Better redirects: You can send users to your homepage or a special login success page, instead of the standard admin screen.
  • Security improvements: Some plugins let you add CAPTCHAs or restrict email notifications.

Option 1: Customize password reset forms with a plugin

This method is beginner-friendly and works well for most use cases.

Step 1: Choose and install a plugin

Here are a few reliable options:

  • LoginPress: Add a visual customizer, logo uploader, and redirect rules.
  • Theme My Login: Replaces all login-related pages with on-site versions.
  • WPForms (Pro): Use its Password Reset Form template to build a custom form via drag-and-drop.

Install and activate your chosen plugin from the WordPress admin under Plugins > Add New.

Step 2: Create a custom password reset page

Once the plugin is active, create a new WordPress page and insert the plugin’s reset form shortcode. For example:

  • [[loginpress_reset]] for LoginPress
  • [[theme-my-login action=”lostpassword”]] for Theme My Login
  • [[wpforms id=”123″]] for a WPForms password reset form

This gives you a clean page URL like /reset-password instead of using the default /wp-login.php?action=lostpassword.

Step 3: Style the form with plugin tools

Most plugins let you:

  • Change colors, fonts, and field sizes from the WordPress Customizer
  • Upload your logo and background image
  • Add helpful text or instructions for users
  • Set a redirect after reset (e.g., go to login page or dashboard)

Step 4: Update the “Lost your password?” link

The default login screen still points to /wp-login.php?action=lostpassword. You can override this by:

  • Editing your theme’s login links
  • Using the plugin’s redirect settings
  • Or hiding the default login page altogether with a tool like WPS Hide Login

Option 2: Customize reset forms manually with code

If you want complete control, or you’re building a fully custom site, you can use code instead.

Step 1: Create a new reset page in WordPress

Go to Pages > Add New and name it something like Reset Password. This will host your custom form.

Step 2: Add the password reset form with PHP

You’ll need to build a form using WordPress functions like retrieve_password() and reset_password(). You can do this by:

  • Creating a custom page template (page-reset-password.php)
  • Or building a shortcode that outputs your form and handles submissions

This part usually goes in your theme’s functions.php file or a custom plugin.

Step 3: Style the form with CSS

Use your theme’s style.css file or a plugin like Simple Custom CSS to tweak:

  • Input field styling
  • Button design
  • Success and error messages

Don’t forget to test both desktop and mobile views.

Step 4: Hook into reset actions (optional)

You can further customize behavior with WordPress hooks:

  • lostpassword_post – fires when a reset is requested
  • retrieve_password_message – lets you edit the email content
  • password_reset – fires when a new password is saved

Use these to add logging, modify redirects, or send branded emails.

Key elements to check when customizing

Even small changes can break the password reset process. Here’s what to watch for:

Use the correct URL format

If you’re not disabling the default login page, ensure the reset flow works with the URL /wp-login.php?action=lostpassword. If you’re redirecting, make sure your custom page handles it properly.

Shortcode placement

If your plugin provides a shortcode, insert it on a live, published page. Avoid placing shortcodes in draft or private pages—users won’t be able to access them.

Match your branding

Apply your site’s fonts, colors, and logo to the form so it feels like part of the same website, not an external tool.

Test everything

Check for:

  • Invalid email handling
  • Email deliverability (check spam folders)
  • Password complexity and confirmation handling
  • Redirect behavior after reset

Pro tip: Customize password reset emails too

Customizing the reset form is a great start, but the email users receive is just as important. Most plugins don’t change the default WordPress email, which looks outdated and unbranded.

To customize it:

This improves trust and makes the reset process feel seamless.

Additional resources

How to build a WordPress site →

A complete beginner’s guide that covers 9 key steps to a successful launch

How to add a download button on WordPress →

Learn how to add a custom download button in WordPress to share files directly with your visitors.


























How to use WordPress Gutenberg blocks →

A complete beginner’s guide to Gutenberg blocks