Rik Lewis

bettersecurity

Why So Slow?

This plugin will allow you to easily remove bloat and turn off unused features, in order to streamline your website and reduce file requests.
It also includes the following additional functionality: 
– Include <a href="https://instant.page" rel="nofollow ugc">instant.page</a> library (v5.1.0) with settings 
– Add Server-Timing headers to enable better debugging 
– Use passive event listengers to improve scroll performance
This plugin is NOT a caching plugin, but should play well with any caching plugin you decide to use.


Perfect for my needs, as it easily allows me to disable features that I don't need, which streamlines my website and makes it load faster for my users.


Perfect for my needs

Improve the loading speed of your website by removing bloat and unused features (formerly named Better Speed)

This plugin sets a default minimum password length of 10 characters, to ensure that passwords are suitably long that they are hard to guess. However, it does not insist on any complexity rules, such as digits and special characters, as length is the most important thing when making a password hard to guess.
This plugin uses Troy Hunt’s <a href="https://haveibeenpwned.com/Passwords" rel="nofollow ugc">Pwned Passwords API</a> in order to check a user’s potential password against a corpus of breached passwords.
The password itself is never sent to any third party, only a partial hash is sent. This means that the password entered will always be private.
As an added bonus, this plugin also upgrades the hashing algorithm used when storing your password in the database. This is a secure one-way hash created using the <a href="https://en.wikipedia.org/wiki/Bcrypt" rel="nofollow ugc">Bcrypt</a> or <a href="https://en.wikipedia.org/wiki/Argon2" rel="nofollow ugc">Argon2</a> algorithm.

Better Passwords

I use this plugin on all of my sites - it not only checks if a used password is included in a haveibeenpwned.com leak, but also forces Wordpress to use more secure hashing algorithms for saving passwords. Highly recommended!

Recommended plugin


Perfect for my needs, as it doesn't attempt to enforce overly complex password rules, it just allows me to set a minimum length, and checks new passwords against Have I Been Pwned to make sure it's not been previously included in a breach. Can also store passwords using stronger hashing algorithms than the WordPress default.


Stop use of a bad passwords, including those in the Have I Been Pwned? breached password database

Why So Slow? vs Better Passwords