Trew Knowledge

Fernando Claussen

<p>Force your admins and/or selected roles to update their password to a new one after a set amount of time. Users will also be unable to use a previously used password.</p>
<h4>FORCE SPECIFIC ROLES TO CHANGE THEIR PASSWORDS</h4>
<p>On the settings page, you can select which roles you want to enforce the password reset.</p>
<h4>WHY FORCE ADMINS TO DO THIS?</h4>
<p>If your site has several admins, all it takes is for one of them to have a weak password or to not change it often for someone to figure it out or brute force attack it. With access to only one of your admin accounts, the hacker can take total control of your website.</p>
<p>By forcing admins to change their password often and not allowing them to use previously used password, you add another layer of security to your data.</p>
<h4>PRIVACY POLICY</h4>
<p>This plugin does not share any data from the site or its users. The only data that is stored in the site’s database is the previously used encrypted passwords of users so they can’t use those again. That information never leaves the server where the plugin is installed and is never shared.</p>
<p>We do not have access to this or any other information.</p>


Advanced Password Security

Nice!

Force your administrators to update their password after a set amount of time.

Ayesh Karunaratne

<p>This plugin ensures that when users of your website (including site administrators), the browsers are instructed to clear all residue such as cookies and caches to enhance the security.</p>
<p><a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Clear-Site-Data" rel="nofollow ugc"><code>Clear-Site-Data</code> HTTP header</a> is sent when a user logs out, which supported browsers will react by removing all existing cookies, cache, and other storage. It will <strong>not</strong> remove saved passwords, permissions, adblocker rules, and other data that are supposed to be permanent.</p>
<p>This plugin prevents possible security vulnerabilities such as clicking the “Back” button in the browser after logging out revealing the pages that should not have been accessible after logging out. Furthermore, this cleans the browser cache, which prevents accessing authenticated media assets (such as purchased images) from the browser cache of a victim.</p>


Clear Logout

A tiny WordPress plugin to clear all browser data related to the site upon logout (With Clear-Site-Data header).

Advanced Password Security vs Clear Logout