Frankie Jarrett

Matt Miller

Miller Media

Note: This is a forked version of the now unsupported <a href="https://wordpress.org/plugins/expire-passwords/" rel="ugc">Expire Passwords</a> plugin. The notes below are copied over from the original plugin and will be updated as relevant updates become available. Please help by contributing to the GitHub repository <a href="https://github.com/Miller-Media/expire-passwords" rel="nofollow ugc">Expire Passwords</a> on GitHub
Did you find this plugin helpful? Please consider <a href="https://wordpress.org/support/view/plugin-reviews/expire-user-passwords" rel="ugc">leaving a 5-star review</a>.
Harden the security of your site by preventing unauthorized access to stale user accounts.
This plugin is also ideal for sites needing to meet certain industry security compliances – such as government, banking or healthcare.
In the plugin settings you can set the maximum number of days users are allowed to use the same password (90 days by default), as well as which user roles will be required to reset their passwords regularly (non-Administrators by default).
Languages supported:
<ul>
<li>English</li>
<li>Czech</li>
<li>Español</li>
</ul>
Development of this plugin is done <a href="https://github.com/Miller-Media/expire-passwords" rel="nofollow ugc">on GitHub</a>. Pull requests welcome. Please see <a href="https://github.com/Miller-Media/expire-passwords/issues" rel="nofollow ugc">issues reported</a> there before going to the plugin forum.

Expire User Passwords

Require certain users to change their passwords on a regular basis.

edward_plainview

Prevent password resets or changes to specific users or user roles. User-specific exceptions to the sweeping user roles can be set. The user’s password is then protected from modification:
<ul>
<li>In the user’s profile editor</li>
<li>Using the password reset link in the login window</li>
</ul>
The settings are available to either the super admin on the network, or normal admins on a single installation. If you wish to hide the settings completely, put the following in your wp-config.php:
<pre><code>define( 'PLAINVIEW_PROTECT_PASSWORDS_HIDE', true );
</code></pre>
Requires PHP 5.4.

Plainview Protect Passwords

I love that is works well with network sites so I don't have to replicate my settings across each of my sites. 

The only issue I ran into is that only network roles are added to the network settings. Maybe it's by design, but it would be awesome if it picked up the roles from the sites because that is where plugins like User Role Editor and WooCommerce have registered them. In order to protect these I would have to modify the settings for each of my network sites separately. Annoying but totally doable. 

Thanks for the quick and easy solution today!

Gets the job done

Selectively protect passwords from being reset or modified.

Expire User Passwords vs Plainview Protect Passwords