Jeff Starr

Does one thing: disables the “Application Passwords” feature.
Activate this plugin to completely disable the new Application Passwords functionality (added in WP version 5.6). To re-enable Application Passwords, simply deactivate the plugin.
Features
<ul>
<li>Lightweight – only one line of code.</li>
<li>Simple to use – activate and done.</li>
<li>No settings to worry about.</li>
<li>Easy peasy.</li>
</ul>
Why is this useful?
Because not every website is the same. Not every website needs this feature. Also disabling application passwords helps to limit unnecessary exposure and eliminate unwanted functionality (i.e., bloat). Whatever the reason, it is your choice. That’s the beauty of WordPress. So if, for whatever reason, you decide that application passwords should be disabled, this plugin will do it with a click.
More infos
For more information about the new Application Passwords feature:
<ul>
<li><a href="https://make.wordpress.org/core/2020/11/05/application-passwords-integration-guide/" rel="nofollow ugc">Application Passwords: Integration Guide</a></li>
<li><a href="https://perishablepress.com/wordpress-disable-application-passwords/" rel="nofollow ugc">Free Plugin: Disable Application Passwords</a></li>
</ul>
Privacy
This plugin does not collect or store any user data. It does not set any cookies, and it does not connect to any third-party locations. Thus, this plugin does not affect user privacy in any way.
Disable Application Passwords is developed and maintained by <a href="https://x.com/perishable" rel="nofollow ugc">Jeff Starr</a>, 15-year <a href="https://plugin-planet.com/" rel="nofollow ugc">WordPress developer</a> and <a href="https://books.perishablepress.com/" rel="nofollow ugc">book author</a>.
Support development
I develop and maintain this free plugin with love for the WordPress community. To show support, you can <a href="https://monzillamedia.com/donate.html" rel="nofollow ugc">make a donation</a> or purchase one of my books:
<ul>
<li><a href="https://wp-tao.com/" rel="nofollow ugc">The Tao of WordPress</a></li>
<li><a href="https://digwp.com/" rel="nofollow ugc">Digging into WordPress</a></li>
<li><a href="https://htaccessbook.com/" rel="nofollow ugc">.htaccess made easy</a></li>
<li><a href="https://wp-tao.com/wordpress-themes-book/" rel="nofollow ugc">WordPress Themes In Depth</a></li>
<li><a href="https://books.perishablepress.com/downloads/wizards-collection-sql-recipes-wordpress/" rel="nofollow ugc">Wizard’s SQL Recipes for WordPress</a></li>
</ul>
And/or purchase one of my premium WordPress plugins:
<ul>
<li><a href="https://plugin-planet.com/bbq-pro/" rel="nofollow ugc">BBQ Pro</a> – Blazing fast WordPress firewall</li>
<li><a href="https://plugin-planet.com/blackhole-pro/" rel="nofollow ugc">Blackhole Pro</a> – Automatically block bad bots</li>
<li><a href="https://plugin-planet.com/banhammer-pro/" rel="nofollow ugc">Banhammer Pro</a> – Monitor traffic and ban the bad guys</li>
<li><a href="https://plugin-planet.com/ga-google-analytics-pro/" rel="nofollow ugc">GA Google Analytics Pro</a> – Connect WordPress to Google Analytics</li>
<li><a href="https://plugin-planet.com/head-meta-pro/" rel="nofollow ugc">Head Meta Pro</a> – Ultimate Meta Tags for WordPress</li>
<li><a href="https://plugin-planet.com/simple-ajax-chat-pro/" rel="nofollow ugc">Simple Ajax Chat Pro</a> – Unlimited chat rooms</li>
<li><a href="https://plugin-planet.com/usp-pro/" rel="nofollow ugc">USP Pro</a> – Unlimited front-end forms</li>
</ul>
Links, tweets and likes also appreciated. Thank you! 🙂

Disable Application Passwords

Jeff Star at Perishable Press has done it again. If you're new to his stuff, you definitely need to take a closer look. Thanks for this plugin! I just installed it on all of my sites.

Another Exceptional Plugin

Activate this plugin to disable the Application Passwords feature that was added in WP v5.6.

Bartosz Gadomski

Teydea Studio

Enhance your WordPress website’s security by forcing users to reset their passwords.
Password Reset Enforcement is a simple yet powerful security plugin that allows site administrators to require users to update their passwords—ideal after a potential data breach, routine security checks, or during onboarding/offboarding processes.
<h3>Features</h3>
<ul>
<li>Force password reset for all users, specific user roles, or individual users.</li>
<li>Optional email notification to users with a direct reset link.</li>
<li>Flexible login behavior:
<ul>
<li>Allow login before resetting: users log in with the old password, are immediately prompted to set a new one.</li>
<li>Block login until reset: users must reset their password before accessing the dashboard.</li>
</ul>
</li>
<li>Choose reset timing:
<ul>
<li>Immediately: forces logout and password reset on next login.</li>
<li>After session expiry: users are asked to reset after their current session ends.</li>
</ul>
</li>
<li>WP-CLI support for command-line password management and automation.</li>
<li>Multisite compatible (network-wide reset only).</li>
<li>Optimized for performance on large-scale and enterprise WordPress installations.</li>
</ul>
<h3>Use Cases</h3>
<ul>
<li>Responding to a security breach or suspected compromise.</li>
<li>Enforcing routine password changes in corporate environments.</li>
<li>Applying onboarding/offboarding security policies for teams or membership sites.</li>
</ul>
<h3>Compatibility</h3>
<ul>
<li>Works on both single-site and multisite (network) WordPress setups.</li>
<li>Supports PHP 7.4+ and WordPress 6.6 through 7.0.</li>
<li>Compatible with modern WordPress admin experience.</li>
</ul>
<h3>WP-CLI Commands</h3>
This plugin provides WP-CLI commands for automated password reset management:
Force Password Reset 
 wp password-reset-enforcement force [–to_all] [–to_roles=] [–to_users=] [–applicability=] [–with_email] [–with_current_password_allowed] [–limit=] [–paged=]
Clear Password Reset Enforcement 
 wp password-reset-enforcement clear [–to_all] [–to_roles=] [–to_users=] [–limit=] [–paged=]
List Users with Enforced Password Reset 
 wp password-reset-enforcement list [–limit=] [–paged=]
Check Password Reset Status 
 wp password-reset-enforcement status [–to_all] [–to_roles=] [–to_users=] [–limit=] [–paged=]
<h4>Command Options</h4>
<ul>
<li><code>--to_all</code>: Target all users on the site</li>
<li><code>--to_roles=<roles></code>: Comma-separated list of user roles (e.g., editor,administrator)</li>
<li><code>--to_users=<user_ids></code>: Comma-separated list of specific user IDs (e.g., 1,5,10)</li>
<li><code>--applicability=<when></code>: When reset takes effect (immediately, after_session_expiry)</li>
<li><code>--with_email</code>: Send email notifications to affected users (default: true)</li>
<li><code>--with_current_password_allowed</code>: Allow users to reuse current password (default: false)</li>
<li><code>--limit=<number></code>: Maximum users to process in single operation</li>
<li><code>--paged=<page></code>: Page number for pagination</li>
</ul>
<h4>Command Examples</h4>
<pre><code>wp password-reset-enforcement force --to_all
wp password-reset-enforcement force --to_roles=editor,administrator --applicability=after_session_expiry
wp password-reset-enforcement clear --to_users=1,5,10
wp password-reset-enforcement list --limit=50 --paged=2
wp password-reset-enforcement status --to_all --limit=50 --paged=2<h3>Related Plugins</h3>
</code></pre>
Want to go beyond forced password resets? Check our <a href="https://wppasswordpolicy.com/?utm_source=Password+Reset+Enforcement" rel="nofollow ugc">WP Password Policy</a> plugin to enforce strong password rules, block weak passwords, and set automatic expiry policies — so you’ll never need to force a password reset again. [https://wordpress.org/plugins/password-requirements/](Free version available on WordPress.org).

Password Reset Enforcement

Easily enforce password reset for WordPress users. Choose to force password changes site-wide, by user and/or by role, to boost your site's security.

Disable Application Passwords vs Password Reset Enforcement