Simon Blackbourn

This plugin redirects newly-registered users to the Admin -> Edit Profile page when they first log in. Until they have changed their password, they will not be able to access either the front-end or other admin pages. An admin notice is also displayed informing them that they must change their password.
New administrators must also change their password, but as a safety measure they can also access the Admin -> Plugins page.
<h4>Translations included</h4>
<ul>
<li>Català (Catalan)</li>
<li>中文 (Chinese)</li>
<li>Nederlands (Dutch)</li>
<li>Français (French)</li>
<li>Deutsch (German)</li>
<li>Ελληνικά (Greek)</li>
<li>Hebrew</li>
<li>Hindi</li>
<li>Magyar (Hungarian)</li>
<li>Italiano (Italian)</li>
<li>日本語 (Japanese)</li>
<li>Khmer</li>
<li>한국어 (Korean)</li>
<li>Lietuvių kalba (Lithuanian)</li>
<li>македонски јазик (Macedonian)</li>
<li>Polski (Polish)</li>
<li>Português do Brasil (Brazilian Portuguese)</li>
<li>Português (Portuguese)</li>
<li>Română (Romanian)</li>
<li>Русский (Russian)</li>
<li>Español (Spanish)</li>
<li>Türkçe (Turkish)</li>
</ul>
New translations are very welcome – please submit them via <a href="http://wp-translations.org/" rel="nofollow ugc">WP-Translations</a>. This plugin’s WP-Translations page is <a href="https://www.transifex.com/projects/p/force-password-change/" rel="nofollow ugc">transifex.com/projects/p/force-password-change</a>

Force Password Change

Require users to change their password on first login.

Frankie Jarrett

Matt Miller

Miller Media

Note: This is a forked version of the now unsupported <a href="https://wordpress.org/plugins/expire-passwords/" rel="ugc">Expire Passwords</a> plugin. The notes below are copied over from the original plugin and will be updated as relevant updates become available. Please help by contributing to the GitHub repository <a href="https://github.com/Miller-Media/expire-passwords" rel="nofollow ugc">Expire Passwords</a> on GitHub
Did you find this plugin helpful? Please consider <a href="https://wordpress.org/support/view/plugin-reviews/expire-user-passwords" rel="ugc">leaving a 5-star review</a>.
Harden the security of your site by preventing unauthorized access to stale user accounts.
This plugin is also ideal for sites needing to meet certain industry security compliances – such as government, banking or healthcare.
In the plugin settings you can set the maximum number of days users are allowed to use the same password (90 days by default), as well as which user roles will be required to reset their passwords regularly (non-Administrators by default).
Languages supported:
<ul>
<li>English</li>
<li>Czech</li>
<li>Español</li>
</ul>
Development of this plugin is done <a href="https://github.com/Miller-Media/expire-passwords" rel="nofollow ugc">on GitHub</a>. Pull requests welcome. Please see <a href="https://github.com/Miller-Media/expire-passwords/issues" rel="nofollow ugc">issues reported</a> there before going to the plugin forum.

Expire User Passwords

Require certain users to change their passwords on a regular basis.

Force Password Change vs Expire User Passwords