Simon Blackbourn

This plugin redirects newly-registered users to the Admin -> Edit Profile page when they first log in. Until they have changed their password, they will not be able to access either the front-end or other admin pages. An admin notice is also displayed informing them that they must change their password.
New administrators must also change their password, but as a safety measure they can also access the Admin -> Plugins page.
<h4>Translations included</h4>
<ul>
<li>Català (Catalan)</li>
<li>中文 (Chinese)</li>
<li>Nederlands (Dutch)</li>
<li>Français (French)</li>
<li>Deutsch (German)</li>
<li>Ελληνικά (Greek)</li>
<li>Hebrew</li>
<li>Hindi</li>
<li>Magyar (Hungarian)</li>
<li>Italiano (Italian)</li>
<li>日本語 (Japanese)</li>
<li>Khmer</li>
<li>한국어 (Korean)</li>
<li>Lietuvių kalba (Lithuanian)</li>
<li>македонски јазик (Macedonian)</li>
<li>Polski (Polish)</li>
<li>Português do Brasil (Brazilian Portuguese)</li>
<li>Português (Portuguese)</li>
<li>Română (Romanian)</li>
<li>Русский (Russian)</li>
<li>Español (Spanish)</li>
<li>Türkçe (Turkish)</li>
</ul>
New translations are very welcome – please submit them via <a href="http://wp-translations.org/" rel="nofollow ugc">WP-Translations</a>. This plugin’s WP-Translations page is <a href="https://www.transifex.com/projects/p/force-password-change/" rel="nofollow ugc">transifex.com/projects/p/force-password-change</a>

Force Password Change

Require users to change their password on first login.

Bartosz Gadomski

Teydea Studio

WP Password Policy is the ultimate solution for WordPress administrators who want to ensure users always use strong, secure passwords. Protect your site from brute-force attacks, compromised credentials, and weak password practices by setting robust, customizable password policies.
Key benefits:
<ul>
<li>Reduce risk of unauthorized access.</li>
<li>Promote strong password hygiene.</li>
<li>Comply with security best practices for WordPress, eCommerce, and multisite networks.</li>
<li>Simple setup, flexible controls, and seamless integration.</li>
</ul>
Features at a glance:
<ul>
<li>Enforce minimum password length and complexity.</li>
<li>Set password expiration/maximum password age.</li>
<li>Prevent use of common, weak passwords (PRO).</li>
<li>Support for multisite networks.</li>
<li>Support for WooCommerce (PRO).</li>
<li>Define policies by user roles or individual users (PRO).</li>
<li>Prevent password reuse (PRO).</li>
<li>Translation-ready and easy to use.</li>
</ul>
Discover more at <a href="https://wppasswordpolicy.com/?utm_source=WP+Password+Policy" rel="nofollow ugc">wppasswordpolicy.com</a>.
Why strong password policies matter
Weak passwords are one of the most common causes of WordPress site hacks. By enforcing strong password rules, you reduce the chances of data breaches, unauthorized access, and compliance issues. Whether you run a single blog, manage client sites, or operate a WooCommerce store, this plugin helps you protect your users and business.
<h3>Features</h3>
Free Features
<ul>
<li>Enforce minimum password length: Set and enforce the minimum number of characters for user passwords.</li>
<li>Password complexity requirements: Require a mix of uppercase, lowercase, numbers, special characters, unique characters, and restrict use of parts of the username.</li>
<li>Set maximum password age: Force users to update their passwords periodically (e.g., every 30 days).</li>
<li>Apply policies globally: Enforce password rules for all users on your site with a single click.</li>
<li>Multisite/network support: Compatible with both standard and multisite WordPress installations.</li>
<li>Translation-ready: Localize the plugin into any language easily.</li>
</ul>
PRO Features
<ul>
<li><a href="https://wppasswordpolicy.com/features/passwords-reuse-prevention/?utm_source=WP+Password+Policy" rel="nofollow ugc">Prevent password reuse</a>: Block users from reusing their previous passwords—encourage new, unique passwords every time.</li>
<li><a href="https://wppasswordpolicy.com/features/dedicated-policies-by-user-and-or-role/?utm_source=WP+Password+Policy" rel="nofollow ugc">Custom password policies for user groups</a>: Assign different password rules for admins, editors, WooCommerce customers, or specific usernames.</li>
<li><a href="https://wppasswordpolicy.com/features/restricted-passwords-list/?utm_source=WP+Password+Policy" rel="nofollow ugc">Block common, weak passwords</a>: Over 100,000 common passwords blacklisted—prevent users from choosing easy-to-guess passwords.</li>
<li>WooCommerce integration: Enforce password policies on WooCommerce account pages, password reset, and registration forms.</li>
<li>Priority support and updates: Get premium email support and frequent updates as a PRO user.</li>
</ul>
Upgrade and learn more about the PRO version at <a href="https://wppasswordpolicy.com/pricing/?utm_source=WP+Password+Policy" rel="nofollow ugc">wppasswordpolicy.com</a>.
<h3>Video Tutorial</h3>
See the plugin in action:
<iframe loading="lazy" title="WP Password Policy plugin walkthrough" width="750" height="563" src="https://www.youtube.com/embed/7g_hWHZ4IFs?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>

WP Password Policy

Define advanced password policies, enforce strong password requirements, and improve your WordPress site's security.

Force Password Change vs WP Password Policy