Weston Ruter

Felix Arntz

Google

<p>As <a href="https://developers.google.com/web/updates/2018/06/feature-policy" rel="nofollow ugc">noted on the Google Developers blog</a>:</p>
<blockquote>
<p>Feature Policy allows web developers to selectively enable, disable, and modify the behavior of certain APIs and web features in the browser. <strong>It’s like CSP but instead of controlling security, it controls features!</strong></p>
<p>The feature policies themselves are little opt-in agreements between developer and browser that can help foster our goals of building (and maintaining) high quality web apps.</p>
</blockquote>
<p>This plugin provides an API for sending the <code>Feature-Policy</code> response headers, as well as an admin interface for deciding which policy to apply for each feature.</p>
<p>As the Feature Policy specification is still evolving and at an early stage, the plugin reflects that and is currently an experimental prototype, to demonstrate how Feature Policy can be used in WordPress.</p>
<h4>Did you know?</h4>
<p>The Feature Policy specification will integrate with the new Reporting API specification. There is a <a href="https://wordpress.org/plugins/reporting-api/" rel="ugc">WordPress plugin for that specification</a> as well.</p>


Feature Policy

WordPress plugin for managing feature policy headers.

Marcin Pietrzak

<p>This plugin empowers site administrators to establish and enforce password policies for users, ensuring compliance with the defined security standards. By implementing this tool, you can effectively prevent users from choosing weak or easily guessable passwords.</p>
<p>With this plugin, you gain the flexibility to configure various password requirements, such as complexity rules (e.g., length, character types), expiration policies, and more, enhancing the overall security of your site.</p>
<p>Enhance the security of your WordPress site with the Simple Password Policy plugin. This straightforward tool allows you to enforce robust password policies for all users, significantly improving your site’s protection against unauthorized access and password guessing attacks.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Password Length Requirement</strong>: Set a minimum length for passwords to prevent short, easily guessable passwords.</li>
<li><strong>Character Variety</strong>: Require passwords to include a mix of uppercase and lowercase letters, numbers, and special characters.</li>
<li><strong>Password Expiration</strong>: Set passwords to expire after a specified period, prompting users to update their passwords regularly.</li>
</ul>
<h4>Benefits</h4>
<ul>
<li><strong>Improved Security</strong>: Protect your site from brute-force attacks and unauthorized access by enforcing strong password policies.</li>
<li><strong>Compliance</strong>: Meet security standards by implementing robust password policies.</li>
<li><strong>User Guidance</strong>: Help users create strong, unique passwords with clear instructions.</li>
</ul>
<h4>GitHub</h4>
<p>The Simple Password Policy plugin is available also on <a href="https://github.com/iworks/simple-password-policy" rel="nofollow ugc">GitHub – Simple Password Policy</a>.</p>
<h4>How it works?</h4>
<p>After installation, you can establish a password policy or require users to change weak passwords upon login.</p>
<h4>See Room for Improvement?</h4>
<p>Awesome! There are several ways you can get involved to help enhance Simple Password Policy:</p>
<p><strong>Report Bugs</strong>: If you encounter a bug, error, or any other issue, please report it! Simply <a href="https://wordpress.org/support/plugin/simple-password-policy/#new-topic-0" rel="ugc">create a new topic in the plugin forum</a>. Once a developer verifies the bug, they’ll file an official <a href="https://github.com/iworks/simple-password-policy/issues/new" rel="nofollow ugc">report on GitHub</a>, where the issue will be addressed.</p>
<p><strong>Suggest New Features</strong>: Got a great idea? We’d love to hear it! Start a new topic in the plugin forum to share your suggestion, explaining why the feature would be valuable. This opens up the discussion and helps us prioritize new enhancements.</p>
<p><strong>Submit Pull Requests</strong>: If you’re a developer, the best way to contribute is by helping with <a href="https://github.com/iworks/simple-password-policy/issues" rel="nofollow ugc">existing issues on GitHub</a>. Be sure to check out our <a href="https://github.com/iworks/simple-password-policy/blob/master/contributing.md" rel="nofollow ugc">contributing guide for developers</a> to get started.</p>
<p>Thank you for helping us make <strong>Simple Password Policy</strong> better for everyone!</p>
<p>The plugin is available also on <a href="https://github.com/iworks/simple-password-policy/" rel="nofollow ugc">GitHub – Simple Password Policy</a>.</p>


Feature Policy vs Simple Password Policy