- Compatible XF 2.x versions
- 2.3
- Additional requirements
- XenForo 2.3.0+, PHP 8.0+
- License
- MIT
- Visible branding
- No
A lightweight add-on that adds two new permissions under General Permissions to control whether users can change their email address or password through the forum's account settings.
Features:
Installation:
Features:
- Block email changes — Adds a "Can change email address" permission
- Block password changes — Adds a "Can change password" permission
- Both permissions default to Allow so existing behavior is unchanged until you configure them
- Clean permission-based approach — no template modifications, no core file edits
- Friendly error messages when a user attempts a blocked action
- The security page (2FA, passkeys) remains accessible even when password changes are blocked
Installation:
- Upload the contents of the upload/ directory to your XenForo root
- Install from Admin CP > Add-ons
- Go to Admin CP > Groups & Permissions > User group permissions
- Select the user group you want to restrict
- Under General Permissions, set "Can change email address (Account Lock)" and/or "Can change password (Account Lock)" to Never
- XenForo 2.3.0+
- PHP 8.0+