Following the StyleSmuggler patch rollout, Adobe's remediation guidance includes rotating all Admin panel passwords as part of a broader credential-rotation process. For shops with many admin accounts, this can be a time-consuming operational step.
Christian Walter and the valantic Magento team published an n98-magerun2 add-on to help: admin:user:force-password-reset.
Preview the selection first
The command selects active Admin users by default. Run a dry run before changing anything:
n98-magerun2 admin:user:force-password-reset --all --dry-run
Review the accounts in the output. When ready, the reset can be confirmed explicitly; sending Magento's standard password-reset email is an opt-in option. The command assigns a cryptographically random password, marks the account for a new password, and never displays or emails that generated password.
Composer package
The add-on is available as n98/magerun2-addon-admin-password-reset on Packagist. The repository README documents the Composer installation and the extra step to link the package into n98-magerun2's module directory.
GitHub: https://github.com/netz98/magerun2-addon-admin-password-reset
Packagist: https://packagist.org/packages/n98/magerun2-addon-admin-password-reset
This tool handles the Admin-password step only. It does not replace Adobe's other remediation actions, such as rotating encryption keys, integration tokens, and other potentially exposed credentials.
Thank you, Christian Walter and the valantic Magento team, for publishing this useful command.
Top comments (0)