Matt Miller

Frankie Jarrett

Miller Media

<p>Note: This is a forked version of the now unsupported <a href="https://wordpress.org/plugins/expire-passwords/" rel="ugc">Expire Passwords</a> plugin. The notes below are copied over from the original plugin and will be updated as relevant updates become available. Please help by contributing to the GitHub repository <a href="https://github.com/Miller-Media/expire-passwords" rel="nofollow ugc">Expire Passwords</a> on GitHub</p>
<p><strong>Did you find this plugin helpful? Please consider <a href="https://wordpress.org/support/view/plugin-reviews/expire-user-passwords" rel="ugc">leaving a 5-star review</a>.</strong></p>
<p>Harden the security of your site by preventing unauthorized access to stale user accounts.</p>
<p>This plugin is also ideal for sites needing to meet certain industry security compliances – such as government, banking or healthcare.</p>
<p>In the plugin settings you can set the maximum number of days users are allowed to use the same password (90 days by default), as well as which user roles will be required to reset their passwords regularly (non-Administrators by default).</p>
<p><strong>Languages supported:</strong></p>
<ul>
<li>Albanian (Shqip)</li>
<li>Arabic (العربية)</li>
<li>Armenian (Հայերեն)</li>
<li>Basque (Euskara)</li>
<li>Bengali (বাংলা)</li>
<li>Bulgarian (Български)</li>
<li>Catalan (Català)</li>
<li>Chinese Simplified (简体中文)</li>
<li>Croatian (Hrvatski)</li>
<li>Czech (Čeština)</li>
<li>Danish (Dansk)</li>
<li>Dutch (Nederlands)</li>
<li>Estonian (Eesti)</li>
<li>Finnish (Suomi)</li>
<li>French (Français)</li>
<li>Galician (Galego)</li>
<li>Georgian (ქართული)</li>
<li>German (Deutsch)</li>
<li>Greek (Ελληνικά)</li>
<li>Hebrew (עברית)</li>
<li>Hindi (हिन्दी)</li>
<li>Hungarian (Magyar)</li>
<li>Indonesian (Bahasa Indonesia)</li>
<li>Irish (Gaeilge)</li>
<li>Italian (Italiano)</li>
<li>Japanese (日本語)</li>
<li>Korean (한국어)</li>
<li>Latvian (Latviešu)</li>
<li>Lithuanian (Lietuvių)</li>
<li>Macedonian (Македонски)</li>
<li>Norwegian (Norsk)</li>
<li>Persian (فارسی)</li>
<li>Persian – Afghanistan (دری)</li>
<li>Polish (Polski)</li>
<li>Portuguese – Brazil (Português do Brasil)</li>
<li>Portuguese – Portugal (Português)</li>
<li>Romanian (Română)</li>
<li>Russian (Русский)</li>
<li>Serbian (Српски)</li>
<li>Slovak (Slovenčina)</li>
<li>Slovenian (Slovenščina)</li>
<li>Spanish (Español)</li>
<li>Swedish (Svenska)</li>
<li>Tamil (தமிழ்)</li>
<li>Thai (ไทย)</li>
<li>Turkish (Türkçe)</li>
<li>Ukrainian (Українська)</li>
<li>Urdu (اردو)</li>
<li>Vietnamese (Tiếng Việt)</li>
<li>Welsh (Cymraeg)</li>
</ul>
<p><strong>Development of this plugin is done <a href="https://github.com/Miller-Media/expire-passwords" rel="nofollow ugc">on GitHub</a>. Pull requests welcome. Please see <a href="https://github.com/Miller-Media/expire-passwords/issues" rel="nofollow ugc">issues reported</a> there before going to the plugin forum.</strong></p>


Expire User Passwords

Require certain users to change their passwords on a regular basis.

Michael Finkenberger

<p><strong>WP Access Control Center</strong> is a powerful security control center for WordPress administrators who want full control over authentication, sessions, and password policies.</p>
<p>Take control of your site’s access layer with real-time session monitoring, flexible two-factor authentication, and powerful emergency tools — all in one place.</p>
<h3>🛡️ Security Overview Dashboard 📊</h3>
<ul>
<li>General indicator about the current site security status</li>
<li>Status overview about the most important security settings</li>
<li>Live view of main session KPIs (refresh: 5s)</li>
<li>Next step recommendations to get your site more secure</li>
<li>Can be made <em>sticky</em> to stay visible when scrolling down</li>
</ul>
<h3>🔐 Two-Factor Protection</h3>
<ul>
<li>Email-based verification codes</li>
<li>TOTP support (Google Authenticator, Microsoft Authenticator, Authy, etc.)</li>
<li>Role-based enforcement</li>
<li>Grace periods for smooth rollout</li>
<li>Backup codes for account recovery</li>
<li>Trusted devices to reduce login friction</li>
</ul>
<h3>👁️ Live Session Control</h3>
<ul>
<li>Real-time overview of all active sessions (AJAX-powered)</li>
<li>Inspect session details and parameters</li>
<li>Instantly terminate individual or all sessions</li>
<li>Monitor user activity as it happens</li>
</ul>
<h3>🔑 Password Policies</h3>
<ul>
<li>Enforce password strength requirements</li>
<li>Prevent password reuse</li>
<li>Define role-based password expiration</li>
<li>Real-time feedback during password creation</li>
</ul>
<h3>⚡ Bulk Password Reset</h3>
<ul>
<li>Reset passwords for roles or selected users</li>
<li>Optionally terminate related sessions</li>
<li>Automatic email notifications (fully customizable)</li>
</ul>
<h3>🔄 Security Key Rotation</h3>
<ul>
<li>One-click regeneration of WordPress KEYs & SALTs</li>
<li>Immediately invalidates all active sessions</li>
<li>Essential for incident response</li>
</ul>
<h3>⏱️ Advanced Session Control</h3>
<ul>
<li>Configure session lifetime per role</li>
<li>Separate rules for “Remember Me”</li>
<li>Automatic cleanup of expired sessions</li>
</ul>
<h3>🎨 Login Experience Designer</h3>
<ul>
<li>Customize the 2FA login page</li>
<li>Background images (outer & inner)</li>
<li>Flexible CSS customization</li>
<li>Safe defaults – no changes unless configured</li>
</ul>
<p><strong>No external services required.</strong> Everything runs locally within your WordPress installation.</p>


WP Access Control Center

Take full control over authentication, sessions, and password security in WordPress – including real-time session monitoring, 2FA, and emergency tools

Expire User Passwords vs WP Access Control Center