How do you handle client password reset requests securely in WHMCS?

[Kane William]

How do you manage password reset requests in WHMCS while maintaining security and minimizing support tickets? Do you rely on the default workflow or use additional tools or customizations? I'd be interested in hearing your best practices and recommendations.

[Patrick12]

Hello Kane William,

There are also dedicated modules built specifically for this — for example, ModulesStack has a Client Password Reset Module for WHMCS (https://modulesstack.com/product/addon-modules/client-password-reset-module-for-whmcs/) that lets admins securely reset client passwords directly from the admin area, since WHMCS removed native password-reset/change functionality for admins after v8.0. Worth checking out if you want more control than the default client-side "Forgot Password" flow offers, especially for support teams who need to assist clients directly without relying on email-only recovery.

[WGS]

Hello Mr. Kane,

We have WHMCS Client Password Reset Module https://whmcsglobalservices.com/reset-client-password-whmcs-module/

This module will help admin to reset customer password and also send that password in email.

[wtools]

On 7/14/2026 at 1:16 PM, Kane William said:

How do you manage password reset requests in WHMCS while maintaining security and minimizing support tickets? Do you rely on the default workflow or use additional tools or customizations? I'd be interested in hearing your best practices and recommendations.

If your customers are okay to reset password  from them by yourself, you can use some hook to add that feature. It will be easy to add,

that will reduce those support tickets

 

[Kane William]

We used to rely on WHMCS's default password reset process, but we've recently started using the ModulesStack Passkey Authentication Module. Since implementing it, we've seen fewer password reset requests because clients can log in securely using passkeys instead of remembering passwords.

For the occasional reset request, we still use WHMCS's built-in password reset feature with secure email verification rather than manually changing or sending passwords. This approach keeps the process secure while providing a much better user experience. So far, the ModulesStack solution has been working really well for us.