Access Tab: Other

The Other subtab in Ultimate Member allows you to manage settings related to resetting passwords and managing blocked data for signed-up users. These settings provide control over password reset limits, request limits for changing passwords, and the ability to block certain email addresses and words during sign-up to enhance security and prevent abuse.

Reset Password

The settings provide options to configure how password resets are handled, such as setting limits on the number of resets allowed and defining the reset process.

Password reset limit

If this option is enabled, a limit will be set on the number of password resets a user can perform. Once the user reaches this limit, they will be unable to reset their password again until the limit is reset or changed. If this option is enabled, the option below becomes available:

• Enter password reset limit: This field allows you to set the maximum reset password limit. The default limit is 3. Once a user reaches this limit, they will be locked from resetting their password using this method. This helps prevent abuse or unauthorized access by limiting the number of password reset attempts a user can make.

Change Password request limit

When enabled, this setting adds a rate limit to the change password form. Users are only allowed to submit one request to change their password per 30 minutes. This helps prevent brute-force attacks or password guessing by limiting the frequency at which password changes can be requested.

Blocked data when sign up

This setting enables you to specify certain criteria or data that will prevent a user from signing up or accessing certain features of your website. This could include blocking specific email addresses, usernames, or other data that you deem inappropriate or undesirable for sign-up.

Blocked Email Addresses (Enter one email per line)

This setting allows you to specify email addresses that will be blocked from signing up or signing in to your website. You can enter one email address per line in this field. Any email addresses you enter here will be blocked from signing up or signing in to your site. To block an entire domain, you can use a wildcard (*) followed by the domain name (e.g., *@gmail.com) to block all email addresses from that domain. This means that any email address ending with @gmail.com will be blocked. Read more here.

Blacklist Words (Enter one word per line)

This setting allows you to specify a list of words that will be blacklisted to prevent users from signing up with those words as their username. You can enter one word per line in this field. Any words you enter here will be added to the blacklist. If a user tries to sign up with a username that contains one of these blacklisted words, they will be prevented from doing so. Read more here.

The following words are included in the default blacklist. Users will be unable to use these words as their usernames when signing up on your site:

• admin
• administrator
• webmaster
• support
• staff

Deprecated Articles: Older articles have been moved to the Deprecated category and may no longer be relevant due to recent updates in Ultimate Member. However, they remain available for historical reference.

For the previous version of the Access Tab documentation, you can view the old article here. Please note that it may contain outdated information that has since been updated.