Follow for free plugins, new theme releases and theme news
Plugin Description
Ensure WordPress Users Use Strong Passwords
Thousands of WordPress blogs and websites get hacked each year because of weak passwords. One way to protect your WordPress from automated brute force attacks is to use strong passwords. Do not let your WordPress become a statistic. Ensure that all your WordPress users use strong passwords and change them frequently with WP Password Policy Manager plugin.
Why WP Password Policy Manager?
You can easily configure strong WordPress password policies within a few seconds and your WordPress users do not have to get used to new systems and interfaces. WP Password Policy Manager integrates seamlessly within your WordPress login page and uses the standard WordPress UI as can be seen from these screenshots, hence the process is transparent to your users.
Configurable WordPress Password Policies
As a WordPress administrators you can configure any of the below password policies to ensure all your WordPress users use strong password:
Password Expire Time
This policy allows you to specify for how long a password is valid before it expires. For example if you specify 1 month, after 1 month the WordPress user will be forced to change his existing password prior to logging in.
Password Length
This policy allows you to specify the minimum number of characters a password should consist of.
Mixed Case Policy
When you enable this policy all of the WordPress users’ passwords should contain both lower and UPPER case characters.
Numeric Digits Policy
When you enable this policy all of the WordPress users’ passwords should contain numeric digits.
Special Characters Policy
When you enable this policy all of the WordPress users’ passwords should contain special characters, such as ! ? * & etc.
Password History Policy
This policy allows you to specify how many passwords should the plugin remember so WordPress users do not use the same password. For example if you specify 8 the user can reuse an old password on the ninth time his password is changed.
Current Password Policy
When you enable this policy WordPress users have to specify the current password to be able to change the password from the WordPress profile page.
Note:WP Password Policy Manager stored users’ passwords the same way WordPress stores them, hence it is secure.
Reset All WordPress Users Password with One Click
In case your WordPress has been hacked or need to reset all WordPress users’ password you can do so with a single click from the passwords policies configuration. Once you reset all of the WordPress users’ passwords each user will receive an email with a new random generated password. Since the password is sent over email once the WordPress users log in they will be asked to change the password again to ensure maximum security.
Keep Track of All WordPress Users Activity on WordPress
Another way to ensure WordPress security is to have full control of your WordPress by keeping an audit log of all changes that happen on your WordPress with WP Security Audit Log plugin.
Other Noteworthy Features and Options
- Built-in policies do not allow for a password to be the same as WordPress user
WP Password Policy Manager in Your Language
We need help translating the plugin. If you’re good at translating, please drop us an email on plugins@wpwhitesecurity.com. WP Password Policy Manager is available in:
Italian thanks to Marco Borla
Dutch thanks to Anne Jan Roeleveld
Polish thanks to Piotr Matuszewski
Serbo-Croatian thanks to Borisa Djuraskovic from Web Hosting Hub
Plugin Newsletter
To keep yourself updated with what is new and updated in our WordPress security plugins please subscribe to the WP White Security Plugins Newsletter.
Other Links
Screenshots
-
Expired password login page allows the user to specify a new password
-
Administrators can configure password policies from the Password Policies node in WordPress settings
-
WordPress password policies are also applied in the WordPress user profile page ensuring users always use strong passwords
-
WordPress password policies are also applied in the lost / reset password page in WordPress ensuring strong password policies are never bypassed
