Manual:$wgPasswordResetRoutes

<translate> Authentication</translate>: $wgPasswordResetRoutes
Whether to allow password resets identified by various bits of data.
<translate> Introduced in version:</translate>	1.18.0 (r86482)
<translate> Removed in version:</translate>	<translate> still in use</translate>
<translate> Allowed values:</translate>	(array)
<translate> Default value:</translate>	see below
<translate> Other settings:</translate> <translate> Alphabetical</translate> | <translate> By function</translate>

Details

Whether to allow password resets ("enter some identifying data, and we'll send an email with a temporary password you can use to get back into the account") identified by various bits of data. Setting all of these to false (or the whole variable to false) has the effect of disabling "password resets" entirely.

File:OOjs UI icon notice-destructive.svg <translate> Warning:</translate>

"Password reset" is different from "Password change". This variable, if set to false, prevents the former. It has no effect to the latter irrespective of its value. To know the differences between these concepts, see Manual:Resetting passwords#Differences between Special:PasswordReset and Special:ChangePassword

Default value

MediaWiki version:

<translate> ≥</translate> 1.26

[
	'username' => true,
	'email' => true,
]

<td class="mw-version-versionbox" title="<translate nowrap> MediaWiki <tvar name=1>1.25</tvar> is unsupported version</translate>">

1.18 – 1.25

<translate> MediaWiki versions:</translate>

array(
	'username' => true,
	'email' => false,
)