Matt Miller

mikemm01

Cloudflare provides security and optimization services for websites all around the internet. WordPress sites are often attacked by bots or hackers and, while Cloudflare has preset firewall rules to help, it doesn’t always filter out all malicious activity.
Cloudflare IP Blacklist allows WordPress admins to add a list of prohibited usernames and if someone attempts to log in with one of these usernames, this users IP address is automatically added to the Cloudflare blacklist. By doing this, the next time this user attempts to load the site, they will be blocked by Cloudflare before their requests get to your site’s server. Add an extra layer of security today to your site!
** This plugin relies on the use of Cloudflare, a third-party service that increases security and performance for web sites and services across the internet. For more information, visit the Cloudflare website and their privacy policy. This plugin is not officially endorsed, built or maintained by the Cloudflare team; rather, we are a development company that uses their services every day! **
<h3>Localizations</h3>
This plugin is available in the following languages:
<ul>
<li>Albanian (Shqip)</li>
<li>Arabic (العربية)</li>
<li>Armenian (Հայերեն)</li>
<li>Basque (Euskara)</li>
<li>Bengali (বাংলা)</li>
<li>Bulgarian (Български)</li>
<li>Catalan (Català)</li>
<li>Chinese Simplified (简体中文)</li>
<li>Croatian (Hrvatski)</li>
<li>Czech (Čeština)</li>
<li>Danish (Dansk)</li>
<li>Dutch (Nederlands)</li>
<li>Estonian (Eesti)</li>
<li>Finnish (Suomi)</li>
<li>French (Français)</li>
<li>Galician (Galego)</li>
<li>Georgian (ქართული)</li>
<li>German (Deutsch)</li>
<li>Greek (Ελληνικά)</li>
<li>Hebrew (עברית)</li>
<li>Hindi (हिन्दी)</li>
<li>Hungarian (Magyar)</li>
<li>Indonesian (Bahasa Indonesia)</li>
<li>Irish (Gaeilge)</li>
<li>Italian (Italiano)</li>
<li>Japanese (日本語)</li>
<li>Korean (한국어)</li>
<li>Latvian (Latviešu)</li>
<li>Lithuanian (Lietuvių)</li>
<li>Macedonian (Македонски)</li>
<li>Norwegian (Norsk)</li>
<li>Persian (فارسی)</li>
<li>Persian – Afghanistan (دری)</li>
<li>Polish (Polski)</li>
<li>Portuguese – Brazil (Português do Brasil)</li>
<li>Portuguese – Portugal (Português)</li>
<li>Romanian (Română)</li>
<li>Russian (Русский)</li>
<li>Serbian (Српски)</li>
<li>Slovak (Slovenčina)</li>
<li>Slovenian (Slovenščina)</li>
<li>Spanish (Español)</li>
<li>Swedish (Svenska)</li>
<li>Tamil (தமிழ்)</li>
<li>Thai (ไทย)</li>
<li>Turkish (Türkçe)</li>
<li>Ukrainian (Українська)</li>
<li>Urdu (اردو)</li>
<li>Vietnamese (Tiếng Việt)</li>
<li>Welsh (Cymraeg)</li>
</ul>

IP Blacklist for Cloudflare

Blacklist IP addresses that attempt to login with a banned username through Cloudflare.

Bartosz Gadomski

Teydea Studio

WP Password Policy lets you define and enforce password policies for all users on your WordPress site.
Set rules for password length, complexity (uppercase, lowercase, digits, special characters), restricted characters, password expiration, and more. The plugin validates passwords on login, registration, password changes, and during active sessions — automatically redirecting users to reset non-compliant passwords.
Key benefits:
<ul>
<li>Enforce password length and complexity rules from a single settings page.</li>
<li>Set password expiration to ensure users update their passwords regularly.</li>
<li>Require users to confirm their current password before making changes.</li>
<li>Compatible with WordPress multisite networks.</li>
</ul>
Whether you manage a personal blog, a membership site, or a multisite network, WP Password Policy helps you maintain consistent password standards across all user accounts.
Learn more at <a href="https://wppasswordpolicy.com/?utm_source=WP+Password+Policy" rel="nofollow ugc">wppasswordpolicy.com</a>.
Why password policies matter
Weak passwords remain one of the most common entry points for unauthorized access to WordPress sites. Enforcing password rules helps reduce this risk and supports compliance with security best practices.
<h3>Features</h3>
<h4>Free Features</h4>
<ul>
<li>Minimum password length — Set and enforce the minimum number of characters for user passwords.</li>
<li>Maximum password length — Limit password length to prevent denial-of-service attacks caused by hashing very long passwords.</li>
<li>Password complexity rules — Require a mix of uppercase letters, lowercase letters, digits, special characters, and a minimum number of unique characters.</li>
<li>Consecutive username symbols — Restrict how many consecutive characters from the username can appear in the password.</li>
<li>Restricted characters — Block specific characters from being used in passwords.</li>
<li>Maximum password age — Force users to update their passwords periodically (e.g., every 30 days).</li>
<li>Minimum password age — Prevent users from changing their password too frequently, discouraging rapid cycling back to an old password.</li>
<li>Require current password — Add a “Current Password” field to the user profile screen and validate it before allowing password changes.</li>
<li>Custom password hints — Replace the default WordPress password hint with a policy-specific hint based on active rules.</li>
<li>Site Health integration — A Site Health test reports whether your plugin settings are properly configured.</li>
<li>Multisite/network support — Works with both standard and multisite WordPress installations.</li>
<li><a href="https://wppasswordpolicy.com/features/ai-integration/?utm_source=WP+Password+Policy" rel="nofollow ugc">AI integration</a> — On WordPress 6.9+ with the <a href="https://wordpress.org/plugins/mcp-adapter/" rel="ugc">MCP Adapter</a> plugin, list, configure, and delete password policies through natural language commands from any connected AI provider.</li>
<li>Translation-ready — Localize the plugin into any language.</li>
</ul>
<h4>PRO Features</h4>
<ul>
<li><a href="https://wppasswordpolicy.com/features/passwords-reuse-prevention/?utm_source=WP+Password+Policy" rel="nofollow ugc">Prevent password reuse</a> — Block users from reusing their previous passwords, encouraging new, unique passwords every time.</li>
<li><a href="https://wppasswordpolicy.com/features/dedicated-policies-by-user-and-or-role/?utm_source=WP+Password+Policy" rel="nofollow ugc">Custom password policies per role or user</a> — Assign different password rules for administrators, editors, WooCommerce customers, or specific users.</li>
<li><a href="https://wppasswordpolicy.com/features/restricted-passwords-list/?utm_source=WP+Password+Policy" rel="nofollow ugc">Block common, weak passwords</a> — Over 100,000 common passwords are blocked, preventing users from choosing easy-to-guess passwords.</li>
<li>Integrations:
<ul>
<li><a href="https://wppasswordpolicy.com/integrations/woocommerce/?utm_source=WP+Password+Policy" rel="nofollow ugc">WooCommerce integration</a> — Enforce password policies on WooCommerce login, registration, checkout account creation (including Store API), account details, password change, and password reset forms. Replaces WooCommerce’s built-in password strength meter with your policy rules.</li>
<li><a href="https://wppasswordpolicy.com/integrations/ultimate-member/?utm_source=WP+Password+Policy" rel="nofollow ugc">Ultimate Member integration</a> — Enforce password policies within Ultimate Member registration, login, password reset, and password change forms. Disables Ultimate Member’s built-in password strength option to avoid conflicts.</li>
<li><a href="https://wppasswordpolicy.com/integrations/tutor-lms/?utm_source=WP+Password+Policy" rel="nofollow ugc">Tutor LMS integration</a> — Enforce password policies on Tutor LMS student and instructor registration, login, password change, and password reset forms.</li>
<li><a href="https://wppasswordpolicy.com/integrations/lifterlms/?utm_source=WP+Password+Policy" rel="nofollow ugc">LifterLMS integration</a> — Enforce password policies on LifterLMS registration (including checkout), account password change, and password reset forms. Replaces LifterLMS’s built-in password strength meter with your policy rules.</li>
<li><a href="https://wppasswordpolicy.com/integrations/learnpress/?utm_source=WP+Password+Policy" rel="nofollow ugc">LearnPress integration</a> — Enforce password policies on LearnPress registration, login, and password change forms.</li>
<li><a href="https://wppasswordpolicy.com/integrations/sensei-lms/?utm_source=WP+Password+Policy" rel="nofollow ugc">Sensei LMS integration</a> — Enforce password policies on Sensei LMS registration and login forms.</li>
<li><a href="https://wppasswordpolicy.com/integrations/buddypress/?utm_source=WP+Password+Policy" rel="nofollow ugc">BuddyPress integration</a> — Enforce password policies on BuddyPress registration, login, and password change forms.</li>
<li><a href="https://wppasswordpolicy.com/integrations/bbpress/?utm_source=WP+Password+Policy" rel="nofollow ugc">bbPress integration</a> — Enforce password policies on bbPress login and profile password change forms. Replaces bbPress’s built-in password strength meter with your policy rules.</li>
</ul>
</li>
<li>Priority support and updates — Get premium email support and updates.</li>
</ul>
Learn more about the PRO version at <a href="https://wppasswordpolicy.com/pricing/?utm_source=WP+Password+Policy" rel="nofollow ugc">wppasswordpolicy.com/pricing</a>.
<h3>Video Tutorial</h3>
See the plugin in action:
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/7g_hWHZ4IFs?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h3>Related Plugins</h3>
Looking for a way to force users to reset their passwords immediately? Check our <a href="https://wordpress.org/plugins/password-reset-enforcement/" rel="ugc">Password Reset Enforcement</a> plugin — it lets you require password resets site-wide, by role, or for individual users, with WP-CLI support for automation.

WP Password Policy

Define and enforce password policies for your WordPress site with length, complexity, and expiration rules.

IP Blacklist for Cloudflare vs WP Password Policy