[GH-ISSUE #11883] feat: User Forgot Password #16389

Closed
opened 2026-04-19 22:19:21 -05:00 by GiteaMirror · 0 comments
Owner

Originally created by @LunaSpark01 on GitHub (Mar 19, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/11883

Check Existing Issues

  • I have searched the existing issues and discussions.

Problem Description

Currently, Open-WebUI does not provide an option for users to reset their passwords if they forget them. While running my instance, I found that if a user forgets their password, there is no built-in mechanism to recover or reset it, leading to a locked-out user experience, unless they reach out to an admin who does have access to the instance of the program.

Image

Desired Solution you'd like

Implement a "Forgot Password" feature on the login page that allows users to reset their password via email verification or another secure method.

Possible implementation approaches:

  • A password reset email with a secure link to update the password.
  • Security questions or token-based authentication to facilitate password recovery.
  • Admin override functionality to reset passwords manually in case email support is unavailable.

Preferred Solution: Password reset with email with a link to update the password

Potential Solution Image:

Image

Alternatives Considered

  • Manually resetting the password via the database, but it is not user-friendly and requires technical knowledge and admin resources.
  • Using an external authentication system like OAuth, though this would require significant architectural changes.

Additional Context

This feature would improve user experience by making sure users are not permanently locked out of their accounts due to forgotten credentials. Lots of web applications provide a similar feature for ease of access and security so I believe this should as well.

Originally created by @LunaSpark01 on GitHub (Mar 19, 2025). Original GitHub issue: https://github.com/open-webui/open-webui/issues/11883 ### Check Existing Issues - [x] I have searched the existing issues and discussions. ### Problem Description Currently, Open-WebUI does not provide an option for users to reset their passwords if they forget them. While running my instance, I found that if a user forgets their password, there is no built-in mechanism to recover or reset it, leading to a locked-out user experience, unless they reach out to an admin who does have access to the instance of the program. ![Image](https://github.com/user-attachments/assets/3e9e61b3-0ba5-4d07-8816-c0e76d121bb2) ### Desired Solution you'd like Implement a "Forgot Password" feature on the login page that allows users to reset their password via email verification or another secure method. Possible implementation approaches: - A password reset email with a secure link to update the password. - Security questions or token-based authentication to facilitate password recovery. - Admin override functionality to reset passwords manually in case email support is unavailable. **Preferred Solution: Password reset with email with a link to update the password** Potential Solution Image: ![Image](https://github.com/user-attachments/assets/4b9c18eb-2da5-4c3d-b16f-a69f6e786a5d) ### Alternatives Considered - Manually resetting the password via the database, but it is not user-friendly and requires technical knowledge and admin resources. - Using an external authentication system like OAuth, though this would require significant architectural changes. ### Additional Context This feature would improve user experience by making sure users are not permanently locked out of their accounts due to forgotten credentials. Lots of web applications provide a similar feature for ease of access and security so I believe this should as well.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#16389