Frankie Jarrett

Matt Miller

Miller Media

Note: This is a forked version of the now unsupported <a href="https://wordpress.org/plugins/expire-passwords/" rel="ugc">Expire Passwords</a> plugin. The notes below are copied over from the original plugin and will be updated as relevant updates become available. Please help by contributing to the GitHub repository <a href="https://github.com/Miller-Media/expire-passwords" rel="nofollow ugc">Expire Passwords</a> on GitHub
Did you find this plugin helpful? Please consider <a href="https://wordpress.org/support/view/plugin-reviews/expire-user-passwords" rel="ugc">leaving a 5-star review</a>.
Harden the security of your site by preventing unauthorized access to stale user accounts.
This plugin is also ideal for sites needing to meet certain industry security compliances – such as government, banking or healthcare.
In the plugin settings you can set the maximum number of days users are allowed to use the same password (90 days by default), as well as which user roles will be required to reset their passwords regularly (non-Administrators by default).
Languages supported:
<ul>
<li>English</li>
<li>Czech</li>
<li>Español</li>
</ul>
Development of this plugin is done <a href="https://github.com/Miller-Media/expire-passwords" rel="nofollow ugc">on GitHub</a>. Pull requests welcome. Please see <a href="https://github.com/Miller-Media/expire-passwords/issues" rel="nofollow ugc">issues reported</a> there before going to the plugin forum.

Expire User Passwords

Require certain users to change their passwords on a regular basis.

Bartosz Gadomski

Teydea Studio

WP Password Policy is the ultimate solution for WordPress administrators who want to ensure users always use strong, secure passwords. Protect your site from brute-force attacks, compromised credentials, and weak password practices by setting robust, customizable password policies.
Key benefits:
<ul>
<li>Reduce risk of unauthorized access.</li>
<li>Promote strong password hygiene.</li>
<li>Comply with security best practices for WordPress, eCommerce, and multisite networks.</li>
<li>Simple setup, flexible controls, and seamless integration.</li>
</ul>
Features at a glance:
<ul>
<li>Enforce minimum password length and complexity.</li>
<li>Set password expiration/maximum password age.</li>
<li>Prevent use of common, weak passwords (PRO).</li>
<li>Support for multisite networks.</li>
<li>Support for WooCommerce (PRO).</li>
<li>Define policies by user roles or individual users (PRO).</li>
<li>Prevent password reuse (PRO).</li>
<li>Translation-ready and easy to use.</li>
</ul>
Discover more at <a href="https://wppasswordpolicy.com/?utm_source=WP+Password+Policy" rel="nofollow ugc">wppasswordpolicy.com</a>.
Why strong password policies matter
Weak passwords are one of the most common causes of WordPress site hacks. By enforcing strong password rules, you reduce the chances of data breaches, unauthorized access, and compliance issues. Whether you run a single blog, manage client sites, or operate a WooCommerce store, this plugin helps you protect your users and business.
<h3>Features</h3>
Free Features
<ul>
<li>Enforce minimum password length: Set and enforce the minimum number of characters for user passwords.</li>
<li>Password complexity requirements: Require a mix of uppercase, lowercase, numbers, special characters, unique characters, and restrict use of parts of the username.</li>
<li>Set maximum password age: Force users to update their passwords periodically (e.g., every 30 days).</li>
<li>Apply policies globally: Enforce password rules for all users on your site with a single click.</li>
<li>Multisite/network support: Compatible with both standard and multisite WordPress installations.</li>
<li>Translation-ready: Localize the plugin into any language easily.</li>
</ul>
PRO Features
<ul>
<li><a href="https://wppasswordpolicy.com/features/passwords-reuse-prevention/?utm_source=WP+Password+Policy" rel="nofollow ugc">Prevent password reuse</a>: Block users from reusing their previous passwords—encourage new, unique passwords every time.</li>
<li><a href="https://wppasswordpolicy.com/features/dedicated-policies-by-user-and-or-role/?utm_source=WP+Password+Policy" rel="nofollow ugc">Custom password policies for user groups</a>: Assign different password rules for admins, editors, WooCommerce customers, or specific usernames.</li>
<li><a href="https://wppasswordpolicy.com/features/restricted-passwords-list/?utm_source=WP+Password+Policy" rel="nofollow ugc">Block common, weak passwords</a>: Over 100,000 common passwords blacklisted—prevent users from choosing easy-to-guess passwords.</li>
<li>WooCommerce integration: Enforce password policies on WooCommerce account pages, password reset, and registration forms.</li>
<li>Priority support and updates: Get premium email support and frequent updates as a PRO user.</li>
</ul>
Upgrade and learn more about the PRO version at <a href="https://wppasswordpolicy.com/pricing/?utm_source=WP+Password+Policy" rel="nofollow ugc">wppasswordpolicy.com</a>.
<h3>Video Tutorial</h3>
See the plugin in action:
<iframe loading="lazy" title="WP Password Policy plugin walkthrough" width="750" height="563" src="https://www.youtube.com/embed/7g_hWHZ4IFs?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>

WP Password Policy

Define advanced password policies, enforce strong password requirements, and improve your WordPress site's security.

Expire User Passwords vs WP Password Policy