Fernando Claussen

Trew Knowledge

<p>Force your admins and/or selected roles to update their password to a new one after a set amount of time. Users will also be unable to use a previously used password.</p>
<h4>FORCE SPECIFIC ROLES TO CHANGE THEIR PASSWORDS</h4>
<p>On the settings page, you can select which roles you want to enforce the password reset.</p>
<h4>WHY FORCE ADMINS TO DO THIS?</h4>
<p>If your site has several admins, all it takes is for one of them to have a weak password or to not change it often for someone to figure it out or brute force attack it. With access to only one of your admin accounts, the hacker can take total control of your website.</p>
<p>By forcing admins to change their password often and not allowing them to use previously used password, you add another layer of security to your data.</p>
<h4>PRIVACY POLICY</h4>
<p>This plugin does not share any data from the site or its users. The only data that is stored in the site’s database is the previously used encrypted passwords of users so they can’t use those again. That information never leaves the server where the plugin is installed and is never shared.</p>
<p>We do not have access to this or any other information.</p>


Advanced Password Security

Nice!

Force your administrators to update their password after a set amount of time.

Will Anderson

Tony Ferrell

<p>WordPress profile pages contain a visual indicator which shows the strength of a user’s chosen password. This is nice, but WordPress doesn’t actually enforce this in any way, so users are free to select weak passwords.</p>
<p>Minimum Password Strength uses the same method to calculate a password’s strength, but forces users to meet a minimum strength requirement before they can change their password.</p>
<p>By default, passwords must have “Medium” strength, but administrators can change this to force passwords to be at least “Weak”, “Medium”, or “Strong”. To change the minimum strength, go to Settings -> Password Strength after installing Minimum Password Strength.</p>
<p>For now, all users have the same password strength requirements, but a later release will allow administrators to select different strength requirements for different roles.</p>


Minimum Password Strength

Enforce a specific password strength. Uses the same strength calculations as the WordPress password strength meter

Advanced Password Security vs Minimum Password Strength