When a user resets their password via the link in the password reset email, I know I can use the password_reset hook to get the user object and the new password. I want to validate the new password to ensure that the strength requirements are met, but I’m not sure on how to generate the error messages so that they display above the form.
When I did this on the profile page via the user_profile_update_errors hook, I had a WP_Error I could add to, but not with this hook.
What would be the best way to handle this?