django-rest-passwordreset
An extension of django rest framework, providing a configurable password reset strategy
Decision gist · record as of 2026-08-14
Yes. This is a production-stable, actively maintained package with zero dependencies and low install friction. It solves a common Django problem (password reset) with a clean signal-based design that lets you control delivery. No known vulnerabilities. Use it unless you need highly custom password reset logic that the signal system cannot accommodate.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Django and Django REST Framework to be installed and configured in your project; the package itself has no runtime dependencies but is useless without them.
- Low friction: pure Python wheel with no runtime dependencies.
- Actively maintained with recent releases and 435 repository stars.
License · maintenance · safety
BSD License (permissive) — BSD License (permissive): you can use this in commercial and proprietary projects with minimal restrictions, provided you include a copy of the license.
last release 2026-06-29 (46 days) · last repo commit 2026-06-30 · 435 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 371,827 downloads/mo, #7,169 on PyPI
Alternatives
Verify before relying
pip install django-rest-passwordreset
# In settings.py INSTALLED_APPS:
INSTALLED_APPS = [
'rest_framework',
'django_rest_passwordreset',
]
# In urls.py:
path('api/password_reset/', include('django_rest_passwordreset.urls', namespace='password_reset'))
# Run migrations:
# python manage.py migrate
# Connect a signal handler to send emails:
from django_rest_passwordreset.signals import reset_password_token_created
from django.dispatch import receiver
@receiver(reset_password_token_created)
def send_password_reset_email(sender, reset_password_token, **kwargs):
# Send email with reset_password_token.key- Whether Django and Django REST Framework are listed as explicit install dependencies or assumed to be pre-installed.
- Exact token expiry time default value (description mentions 24 hours but setting name differs from documented behavior).
- Whether the management command name is `clearresetpasswodtokens` (as shown) or if that is a typo in the documentation.
What it is and what it does
Django-rest-passwordreset is a Django REST Framework extension that adds password reset functionality via REST endpoints. It provides two main endpoints: one to request a reset token (sent to a registered email) and another to verify the token and set a new password. The package does not assume how tokens are delivered—instead, it fires Django signals when tokens are created or used, allowing you to hook in your own delivery mechanism (email, SMS, push notification, etc.).
The package stores tokens in a database table with configurable expiry (default 24 hours) and includes a management command for periodic cleanup of expired tokens. It handles security concerns like token validation, expiration checking, and optional information-leakage prevention to avoid revealing whether an account exists. You integrate it by adding it to INSTALLED_APPS, running migrations, including its URL patterns, and connecting signal handlers to send notifications.
Use it for
- Add a self-service password reset flow to a Django REST API without building token management from scratch.
- Send password reset links via email by connecting to the reset_password_token_created signal.
- Validate reset tokens before allowing password changes, with automatic expiry and cleanup.
- Prevent account enumeration attacks by returning generic responses for invalid, expired, or missing tokens.
- Schedule periodic cleanup of expired tokens using the included management command to keep the database lean.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes.
This is a production-stable, actively maintained package with zero dependencies and low install friction. It solves a common Django problem (password reset) with a clean signal-based design that lets you control delivery. No known vulnerabilities. Use it unless you need highly custom password reset logic that the signal system cannot accommodate.
Install
django-rest-passwordreset on PyPI
Before you install
Low friction: pure Python wheel with no runtime dependencies. Actively maintained with recent releases and 435 repository stars. Production-stable status.
Requires Django and Django REST Framework to be installed and configured in your project; the package itself has no runtime dependencies but is useless without them.
License in practice
BSD License (permissive): you can use this in commercial and proprietary projects with minimal restrictions, provided you include a copy of the license.
Quickstart
pip install django-rest-passwordreset
# In settings.py INSTALLED_APPS:
INSTALLED_APPS = [
'rest_framework',
'django_rest_passwordreset',
]
# In urls.py:
path('api/password_reset/', include('django_rest_passwordreset.urls', namespace='password_reset'))
# Run migrations:
# python manage.py migrate
# Connect a signal handler to send emails:
from django_rest_passwordreset.signals import reset_password_token_created
from django.dispatch import receiver
@receiver(reset_password_token_created)
def send_password_reset_email(sender, reset_password_token, **kwargs):
# Send email with reset_password_token.keyVerify before relying
- Whether Django and Django REST Framework are listed as explicit install dependencies or assumed to be pre-installed.
- Exact token expiry time default value (description mentions 24 hours but setting name differs from documented behavior).
- Whether the management command name is `clearresetpasswodtokens` (as shown) or if that is a typo in the documentation.
Package facts
| License | BSD License permissive |
| Python support | Not specified |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | None |
| Maintenance | Actively maintained 46 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 371,827 / month, #7,169 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 5 - Production/StableEnvironment :: Web EnvironmentFramework :: DjangoFramework :: Django :: 5.2Framework :: Django :: 6.0Intended Audience :: DevelopersLicense :: OSI Approved :: BSD LicenseOperating System :: OS IndependentProgramming Language :: PythonProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14Topic :: Internet :: WWW/HTTPTopic :: Internet :: WWW/HTTP :: Dynamic Content |
Evidence: django_rest_passwordreset-1.6.0-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “django password reset api”
- django-rest-passwordresetProvides REST API endpoints for Django applications to handle…
- djoserProvides Django REST Framework views for user registration, login,…
- dj-rest-authProvides drop-in REST API endpoints for user authentication,…
Give your agent the search over MCP, or paste the wish link into any chat.
More WWW/HTTP packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
h11 is a pure-Python HTTP/1.1 protocol implementation that handles parsing and serializing HTTP messages without any built-in I/O, letting you integrate it with any network layer you choose.
HTTPX is a fully featured HTTP client library for Python that provides both sync and async APIs, with support for HTTP/1.1 and HTTP/2, plus an integrated command-line client.
Install it if you are building new projects or modernizing existing ones that rely on HTTP.
A minimal low-level HTTP client library that sends HTTP requests with thread-safe and task-safe connection pooling, supporting HTTP/1.1, HTTP/2, proxies, and both sync and async interfaces.
aiohttp is an async HTTP client and server framework built on asyncio, supporting both WebSockets and middleware-based routing for building concurrent web applications.
Install it if you need async HTTP client or server capabilities in asyncio-based applications.
See also dj-rest-auth · django-ses · django-revproxy · django-sesame · djangorestframework · drf-jwt · drf-api-logger · djangorestframework-guardian · fastapi-users · mailjet-rest