Losing access to your hosting and licensing control hub can disrupt critical operations. BoostonCP provides an automated, self-service password recovery mechanism designed to restore account access securely without exposing user accounts to unauthorized takeover or email enumeration attacks.

This guide details the step-by-step procedure for requesting a password reset, verifying the one-time cryptographic token, and configuring a new secure password.

1. Accessing the Password Recovery Portal

You can navigate to the password recovery interface via two methods:

  1. Direct URL:
    https://boostoncp.com/client/forgot_password.php
  2. From the Login Screen: Navigate to https://boostoncp.com/client/index.php and click the Reset Password link located beneath the login form.

2. Interface Tour: The Forgot Password Terminal

The password reset terminal provides a streamlined interface focused solely on credential restoration.

BoostonCP Forgot Password Terminal

Key visual components include:

  • Terminal Header: Displays FORGOT PASSWORD with the instruction Enter your email to receive a reset link.
  • Email Address Input Field: An icon-prefixed (fas fa-envelope) text input where you enter the primary email registered with your account.
  • reCAPTCHA Challenge: Google reCAPTCHA v2 box preventing automated password-reset floods and denial-of-service spamming against customer mailboxes.
  • Primary Action Button: The green glowing SEND RESET LINK button.
  • Navigation Links:
    • <- Back to Login: Returns to index.php.
    • <- Back to Homepage: Returns to boostoncp.com.

3. Step-by-Step Password Reset Walkthrough

Follow these sequential steps to reset your password:

Step 1: Submit Your Registered Email

Enter your registered email address into the EMAIL ADDRESS field. Ensure that there are no leading or trailing spaces.

Step 2: Solve the reCAPTCHA Checkbox

Click the I'm not a robot box to prove human presence. Complete any image challenge presented.

Click the SEND RESET LINK button. The server will:

  1. Search the database for an active account matching the provided email address.
  2. Generate a cryptographically secure 64-character hexadecimal reset token (bin2hex(random_bytes(32))).
  3. Store the token hash in the database along with a 1-hour expiration timestamp.
  4. Dispatch an automated password reset email with your unique reset link.

[!NOTE] To prevent email enumeration attacks, the portal displays a generic confirmation message regardless of whether the email address exists in the database.

Step 4: Check Your Email Inbox & Spam Folder

Open your email client and look for an email from BoostonCP Support with the subject:

BoostonCP Password Reset Request

Inside the message, click the secure reset link. The link has the following structure:

https://boostoncp.com/client/reset_password.php?token=a8f9c73d9e2b1045f...

Step 5: Configure Your New Password

On the reset_password.php page:

  1. Enter your new password into the New Password field (minimum 8 characters).
  2. Re-enter the exact same password into the Confirm New Password field.
  3. Click the UPDATE PASSWORD button.

Step 6: Log In with Your New Credentials

Upon successful update, a confirmation banner will appear: Password updated successfully. You can now log in. Click Go to Login and authenticate with your new password.

4. Cryptographic Security Standards of Password Reset

The BoostonCP password recovery workflow incorporates industry-standard security safeguards:

  • Time-Bound Token Expiration: Every reset token is valid for exactly 60 minutes from generation. After 1 hour, the token expires automatically and cannot be used.
  • Single-Use Invalidation: Once a token is consumed to update a password, it is immediately deleted from the database. A token cannot be re-used.
  • Session Termination: When a password is reset, all existing active login sessions across all devices are immediately revoked, locking out any unauthorized parties who may have compromised a stale session.

5. Troubleshooting Password Reset Difficulties

  • Cause: You clicked a reset link older than 1 hour, or you previously clicked it and updated your password.
  • Resolution: Return to https://boostoncp.com/client/forgot_password.php and submit a new request to generate a fresh token.

Issue 2: Password reset email not arriving

  • Cause: The email may have been flagged by aggressive spam filters, or your registered email address was mistyped during registration.
  • Resolution:
    1. Inspect your Spam / Junk folder as well as the Promotions tab in Gmail.
    2. Add [email protected] or [email protected] to your safe sender whitelist.
    3. Wait 3–5 minutes for mail queue delivery. If still missing, verify that you entered the correct email address.