Overview Version (1) Discussion (1)

• 

  Account Lock - Block Email & Password Changes

  A lightweight add-on that adds two new permissions under General Permissions to control whether user
  About this resource

  A lightweight add-on that adds two new permissions under General Permissions to control whether users can change their email address or password through the forum's account settings.
  
  Features:
  

  • Block email changes — Adds a "Can change email address" permission
  • Block password changes — Adds a "Can change password" permission
  • Both permissions default to Allow so existing behavior is unchanged until you configure them
  • Clean permission-based approach — no template modifications, no core file edits
  • Friendly error messages when a user attempts a blocked action
  • The security page (2FA, passkeys) remains accessible even when password changes are blocked

  Use case:Ideal for sites where member account management is handled through an external system (such as a main site dashboard) and you want to prevent users from modifying their credentials directly through the forum.
  
  Installation:
  

  1. Upload the contents of the upload/ directory to your XenForo root
  2. Install from Admin CP > Add-ons

  Configuration:
  

  1. Go to Admin CP > Groups & Permissions > User group permissions
  2. Select the user group you want to restrict
  3. Under General Permissions, set "Can change email address (Account Lock)" and/or "Can change password (Account Lock)" to Never

  Requirements:
  

  • XenForo 2.3.0+
  • PHP 8.0+

  Uninstallation:Uninstall through Admin CP > Add-ons. All permissions and phrases are automatically cleaned up. No database tables or columns are created by this add-on.
• Version

  1.1.0 Stable Available Mar 12, 2026 · 1

  Download

  File size: 22.6 KB

  SHA-256: 3951a72633022f520767c3569fb966b727b4129074a57126d3fd116b4e7fca46

  SHA-256 verified Package valid Compatibility checked Last verified: Wednesday at 12:10 AM

  A lightweight add-on that adds two new permissions under General Permissions to control whether users can change their email address or password through the forum's account settings.
  
  Features:
  

  • Block email changes — Adds a "Can change email address" permission
  • Block password changes — Adds a "Can change password" permission
  • Both permissions default to Allow so existing behavior is unchanged until you configure them
  • Clean permission-based approach — no template modifications, no core file edits
  • Friendly error messages when a user attempts a blocked action
  • The security page (2FA, passkeys) remains accessible even when password changes are blocked

  Use case:Ideal for sites where member account management is handled through an external system (such as a main site dashboard) and you want to prevent users from modifying their credentials directly through the forum.
  
  Installation:
  

  1. Upload the contents of the upload/ directory to your XenForo root
  2. Install from Admin CP > Add-ons

  Configuration:
  

  1. Go to Admin CP > Groups & Permissions > User group permissions
  2. Select the user group you want to restrict
  3. Under General Permissions, set "Can change email address (Account Lock)" and/or "Can change password (Account Lock)" to Never

  Requirements:
  

  • XenForo 2.3.0+
  • PHP 8.0+

  Uninstallation:Uninstall through Admin CP > Add-ons. All permissions and phrases are automatically cleaned up. No database tables or columns are created by this add-on.
• Discussion

  This resource has a discussion thread on the forum where you can ask questions, report issues, and talk with the author and other users.

  Join the discussion (1)