Rik Lewis

bettersecurity

This plugin will create and store hashes of content (eg. posts, pages, etc.) and monitor these moving forwards in order to detect when changes occur. When changes are made outside of the normal working process, such as a direct database update, this will then be detected as the hash will get out of sync with the content.

Better Detection


Perfect for my needs, helps to detect unwanted changes to my website, which is a strong indicator that a bad actor has managed to gain access and defaced my site or added malicious content.


Perfect for my needs

Improve the security of your website by detecting unexpected changes to content

This plugin sets a default minimum password length of 10 characters, to ensure that passwords are suitably long that they are hard to guess. However, it does not insist on any complexity rules, such as digits and special characters, as length is the most important thing when making a password hard to guess.
This plugin uses Troy Hunt’s <a href="https://haveibeenpwned.com/Passwords" rel="nofollow ugc">Pwned Passwords API</a> in order to check a user’s potential password against a corpus of breached passwords.
The password itself is never sent to any third party, only a partial hash is sent. This means that the password entered will always be private.
As an added bonus, this plugin also upgrades the hashing algorithm used when storing your password in the database. This is a secure one-way hash created using the <a href="https://en.wikipedia.org/wiki/Bcrypt" rel="nofollow ugc">Bcrypt</a> or <a href="https://en.wikipedia.org/wiki/Argon2" rel="nofollow ugc">Argon2</a> algorithm.

Better Passwords

I use this plugin on all of my sites - it not only checks if a used password is included in a haveibeenpwned.com leak, but also forces Wordpress to use more secure hashing algorithms for saving passwords. Highly recommended!

Recommended plugin


Perfect for my needs, as it doesn't attempt to enforce overly complex password rules, it just allows me to set a minimum length, and checks new passwords against Have I Been Pwned to make sure it's not been previously included in a breach. Can also store passwords using stronger hashing algorithms than the WordPress default.


Stop use of a bad passwords, including those in the Have I Been Pwned? breached password database

Better Detection vs Better Passwords