Frankie Jarrett

Did you find this plugin helpful? Please consider <a href="https://wordpress.org/support/view/plugin-reviews/expire-passwords" rel="ugc">leaving a 5-star review</a>.
Harden the security of your site by preventing unauthorized access to stale user accounts.
This plugin is also ideal for sites needing to meet certain industry security compliances – such as government, banking or healthcare.
In the plugin settings you can set the maximum number of days users are allowed to use the same password (90 days by default), as well as which user roles will be required to reset their passwords regularly (non-Administrators by default).
Languages supported:
<ul>
<li>English</li>
<li>Czech</li>
<li>Español</li>
</ul>
Development of this plugin is done <a href="https://github.com/fjarrett/expire-passwords" rel="nofollow ugc">on GitHub</a>. Pull requests welcome. Please see <a href="https://github.com/fjarrett/expire-passwords/issues" rel="nofollow ugc">issues reported</a> there before going to the plugin forum.

Expire Passwords

Require certain users to change their passwords on a regular basis.

Fidgety Lizard

Kona Macphee

PLEASE NOTE: AS OF WP 5.7, THIS PLUGIN IS NO LONGER SUPPORTED.
Since WordPress 4.3, new users are no longer sent their passwords directly by email. Instead, they are sent a message containing a link to the Reset Password page, where they can choose their own password. Additionally, the Reset Password page now appears with a strong password already suggested in the “New password” field.
This plugin removes the suggested password from the Reset Password page, because often users assume that their password has already been set to this new suggested password (leading to repeated password reset requests, frustration and unnecessary helpdesk queries.)

No Suggested Password

AS OF WP 5.7, THIS PLUGIN IS NO LONGER SUPPORTED.
Clears the initial suggested password on the WP 4.3+ password reset page.

Expire Passwords vs No Suggested Password