Simon Blackbourn

This plugin redirects newly-registered users to the Admin -> Edit Profile page when they first log in. Until they have changed their password, they will not be able to access either the front-end or other admin pages. An admin notice is also displayed informing them that they must change their password.
New administrators must also change their password, but as a safety measure they can also access the Admin -> Plugins page.
<h4>Translations included</h4>
<ul>
<li>Català (Catalan)</li>
<li>中文 (Chinese)</li>
<li>Nederlands (Dutch)</li>
<li>Français (French)</li>
<li>Deutsch (German)</li>
<li>Ελληνικά (Greek)</li>
<li>Hebrew</li>
<li>Hindi</li>
<li>Magyar (Hungarian)</li>
<li>Italiano (Italian)</li>
<li>日本語 (Japanese)</li>
<li>Khmer</li>
<li>한국어 (Korean)</li>
<li>Lietuvių kalba (Lithuanian)</li>
<li>македонски јазик (Macedonian)</li>
<li>Polski (Polish)</li>
<li>Português do Brasil (Brazilian Portuguese)</li>
<li>Português (Portuguese)</li>
<li>Română (Romanian)</li>
<li>Русский (Russian)</li>
<li>Español (Spanish)</li>
<li>Türkçe (Turkish)</li>
</ul>
New translations are very welcome – please submit them via <a href="http://wp-translations.org/" rel="nofollow ugc">WP-Translations</a>. This plugin’s WP-Translations page is <a href="https://www.transifex.com/projects/p/force-password-change/" rel="nofollow ugc">transifex.com/projects/p/force-password-change</a>

Force Password Change

Require users to change their password on first login.

mrdenny

Do NOT use with PHP 7.3 or above. This plugin currently uses features which are only found in PHP 7.2 and below.
Allows for the secure saving of passwords within the WordPress Admin Interface. Access to a accounts can be given based on 
wordpress users and/or groups. Groups are defined within the plugin directly on the settings screen. Plugin uses your sites 
specific SECURE_AUTH_KEY value from your wp-config.php file as your encryption key, so no two sites use the same key (a 
warning is shown if you are using the default value).
The plugin includes 5 user configurable fields (“Client Name” and “Account Type” in the screenshots) so you can customize 
them for your needs.
All viewing of passwords as well as changing of passwords is logged for auditing purposes.
Encryption keys can be changed by putting the new key in the wp-config.php file and the old key in the settings page, then 
running through the key migration process.
Searching in the username field supports wildcard searching by default. By default the five user defined fields are static 
matching when there is a value in the field. Wildcard searching is supported on the user defined fields by using the %.

Password Vault

Gives you an application within the Wordpress admin screen which allows you to securely save information for accounts which you use regularly.

Force Password Change vs Password Vault