Recover a Lost Drupal 7 Password


It happens to all of us … we lose our password.

Actually recovering your original password in Drupal 7 is not possible, but resetting one is possible and we’re going to show you how to do it.

Your first step should be to try and reset your password by adding this to your site’s URL: /user/password/. If that doesn’t work or if you don’t know the email for the account, then you can use this tutorial.

Drupal 6 vs Drupal 7

Resetting your password was easier in Drupal 6 and is explained in this tutorial.

Drupal 7 uses a more powerful 128bit encryption called sha512. In this tutorial we will show you how to generate the encrypted form of the password, which you an then paste into the data base and change the password “hard” way.

Step 1: Create a short PHP script

This method uses a short PHP script. The code is below. First thing to do is copy this to your clipboard exactly as it’s written. Paste this into a text or script editor and then save it with an arbitrary and random name. If you use a plain language name it will give you an error message telling you to rename it with a random string., and be sure to remove this file from your server immediately after you use it. This is a big security risk since anyone accessing this could change your administrator password.

define('DRUPAL_ROOT', getcwd());
require_once DRUPAL_ROOT . '/includes/';
require_once DRUPAL_ROOT . '/includes/';
if (isset($_GET['pass']) && !empty($_GET['pass'])) {
$newhash = user_hash_password($_GET['pass']);
else {
die('Retry with ?pass=PASSWORD set in the URL');
$updatepass = db_update('users')
'pass' => $newhash,
// 'name' => 'admin',
// 'mail' => '';
->condition('uid', '1', '=')
print "Done. Please delete this file immediately!";

Step 2: Load the PHP script to your main Drupal Directory

  • Paste this in a plain text editor or script editor and save it with the name admin-pass-reset.php (you can use any name you want)
  • Upload this to your Drupal home directory.

Step 3: Use the PHP script from your browser address bar

  • Go to in the address bar of your browser.
  • Replace “mypassword” with whatever you want to use as the password. The script accesses the Drupal password function and changes the password for you.
  • This script can also be used to change the admin username and email as well.
  • In the script itself uncomment the lines that deal with those (lines 19 and 20 in the image above) and change them to what you want. Remove the // marks from the beginning of the line, to uncomment them and make them active.

Here’s what they look like with the comment marks removed.

Step 4: Uninstall the PHP script and login

  • One you’re done resetting passwords. Be sure to uninstall the php script you created by deleting it using FTP or your file manager.


0 0 votes
Article Rating
Notify of
Inline Feedbacks
View all comments
11 years ago

if drush is an option, check out the ‘drush user-password’ command

11 years ago

This tip doesn’t work. You get an error Fatal error: Call to undefined function user_load() in /doc/root/password.php on line 2

You would need to include and bootstrap drupal to get this to work.

There’s a php script (should work on Windows) at scripts/[url=][/url] that people can use if they have access to the command line.

Drush is really the easiest solution, though. “drush uli” gets it done quick and easy across all platforms.

Juan Valentín-Pastrana
Juan Valentín-Pastrana
10 years ago

Didn’t expect that changing drupal password was such a nightmare

10 years ago

Thanks. I’m only running D7 on localhost, but your instructions saved me from having to re-install everything.

Would love your thoughts, please comment.x