Matt Miller

mikemm01

<p>Cloudflare provides security and optimization services for websites all around the internet. WordPress sites are often attacked by bots or hackers and, while Cloudflare has preset firewall rules to help, it doesn’t always filter out all malicious activity.</p>
<p>Cloudflare IP Blacklist allows WordPress admins to add a list of prohibited usernames and if someone attempts to log in with one of these usernames, this users IP address is automatically added to the Cloudflare blacklist. By doing this, the next time this user attempts to load the site, they will be blocked by Cloudflare before their requests get to your site’s server. Add an extra layer of security today to your site!</p>
<p>** This plugin relies on the use of Cloudflare, a third-party service that increases security and performance for web sites and services across the internet. For more information, visit the Cloudflare website and their privacy policy. This plugin is not officially endorsed, built or maintained by the Cloudflare team; rather, we are a development company that uses their services every day! **</p>
<h3>Localizations</h3>
<p>This plugin is available in the following languages:</p>
<ul>
<li>Albanian (Shqip)</li>
<li>Arabic (العربية)</li>
<li>Armenian (Հայերեն)</li>
<li>Basque (Euskara)</li>
<li>Bengali (বাংলা)</li>
<li>Bulgarian (Български)</li>
<li>Catalan (Català)</li>
<li>Chinese Simplified (简体中文)</li>
<li>Croatian (Hrvatski)</li>
<li>Czech (Čeština)</li>
<li>Danish (Dansk)</li>
<li>Dutch (Nederlands)</li>
<li>Estonian (Eesti)</li>
<li>Finnish (Suomi)</li>
<li>French (Français)</li>
<li>Galician (Galego)</li>
<li>Georgian (ქართული)</li>
<li>German (Deutsch)</li>
<li>Greek (Ελληνικά)</li>
<li>Hebrew (עברית)</li>
<li>Hindi (हिन्दी)</li>
<li>Hungarian (Magyar)</li>
<li>Indonesian (Bahasa Indonesia)</li>
<li>Irish (Gaeilge)</li>
<li>Italian (Italiano)</li>
<li>Japanese (日本語)</li>
<li>Korean (한국어)</li>
<li>Latvian (Latviešu)</li>
<li>Lithuanian (Lietuvių)</li>
<li>Macedonian (Македонски)</li>
<li>Norwegian (Norsk)</li>
<li>Persian (فارسی)</li>
<li>Persian – Afghanistan (دری)</li>
<li>Polish (Polski)</li>
<li>Portuguese – Brazil (Português do Brasil)</li>
<li>Portuguese – Portugal (Português)</li>
<li>Romanian (Română)</li>
<li>Russian (Русский)</li>
<li>Serbian (Српски)</li>
<li>Slovak (Slovenčina)</li>
<li>Slovenian (Slovenščina)</li>
<li>Spanish (Español)</li>
<li>Swedish (Svenska)</li>
<li>Tamil (தமிழ்)</li>
<li>Thai (ไทย)</li>
<li>Turkish (Türkçe)</li>
<li>Ukrainian (Українська)</li>
<li>Urdu (اردو)</li>
<li>Vietnamese (Tiếng Việt)</li>
<li>Welsh (Cymraeg)</li>
</ul>


IP Blacklist for Cloudflare

Blacklist IP addresses that attempt to login with a banned username through Cloudflare.

Bartosz Gadomski

Teydea Studio

<p><strong>Enhance your WordPress website’s security by forcing users to reset their passwords.</strong></p>
<p>Password Reset Enforcement is a simple yet powerful security plugin that allows site administrators to require users to update their passwords—ideal after a potential data breach, routine security checks, or during onboarding/offboarding processes.</p>
<h3>Features</h3>
<ul>
<li><strong>Force password reset for all users</strong>, specific user roles, or individual users.</li>
<li><strong>Optional email notification</strong> to users with a direct reset link.</li>
<li><strong>Flexible login behavior</strong>:
<ul>
<li><em>Allow login before resetting</em>: users log in with the old password, are immediately prompted to set a new one.</li>
<li><em>Block login until reset</em>: users must reset their password before accessing the dashboard.</li>
</ul>
</li>
<li><strong>Choose reset timing</strong>:
<ul>
<li><em>Immediately</em>: forces logout and password reset on next login.</li>
<li><em>After session expiry</em>: users are asked to reset after their current session ends.</li>
</ul>
</li>
<li><strong>WP-CLI support</strong> for command-line password management and automation.</li>
<li><strong>Multisite compatible</strong> (network-wide reset only).</li>
<li>Optimized for performance on large-scale and enterprise WordPress installations.</li>
</ul>
<h3>Use Cases</h3>
<ul>
<li>Responding to a <strong>security breach</strong> or suspected compromise.</li>
<li>Enforcing <strong>routine password changes</strong> in corporate environments.</li>
<li>Applying <strong>onboarding/offboarding security policies</strong> for teams or membership sites.</li>
</ul>
<h3>Compatibility</h3>
<ul>
<li>Works on both single-site and multisite (network) WordPress setups.</li>
<li>Supports PHP 7.4+ and WordPress 6.6 through 7.0.</li>
<li>Compatible with modern WordPress admin experience.</li>
</ul>
<h3>WP-CLI Commands</h3>
<p>This plugin provides WP-CLI commands for automated password reset management:</p>
<p><strong>Force Password Reset</strong><br />
    wp password-reset-enforcement force [–to_all] [–to_roles=] [–to_users=] [–applicability=] [–with_email] [–with_current_password_allowed] [–limit=] [–paged=]</p>
<p><strong>Clear Password Reset Enforcement</strong><br />
    wp password-reset-enforcement clear [–to_all] [–to_roles=] [–to_users=] [–limit=] [–paged=]</p>
<p><strong>List Users with Enforced Password Reset</strong><br />
    wp password-reset-enforcement list [–limit=] [–paged=]</p>
<p><strong>Check Password Reset Status</strong><br />
    wp password-reset-enforcement status [–to_all] [–to_roles=] [–to_users=] [–limit=] [–paged=]</p>
<h4>Command Options</h4>
<ul>
<li><code>--to_all</code>: Target all users on the site</li>
<li><code>--to_roles=<roles></code>: Comma-separated list of user roles (e.g., editor,administrator)</li>
<li><code>--to_users=<user_ids></code>: Comma-separated list of specific user IDs (e.g., 1,5,10)</li>
<li><code>--applicability=<when></code>: When reset takes effect (immediately, after_session_expiry)</li>
<li><code>--with_email</code>: Send email notifications to affected users (default: true)</li>
<li><code>--with_current_password_allowed</code>: Allow users to reuse current password (default: false)</li>
<li><code>--limit=<number></code>: Maximum users to process in single operation</li>
<li><code>--paged=<page></code>: Page number for pagination</li>
</ul>
<h4>Command Examples</h4>
<pre><code>wp password-reset-enforcement force --to_all
wp password-reset-enforcement force --to_roles=editor,administrator --applicability=after_session_expiry
wp password-reset-enforcement clear --to_users=1,5,10
wp password-reset-enforcement list --limit=50 --paged=2
wp password-reset-enforcement status --to_all --limit=50 --paged=2<h3>Related Plugins</h3>
</code></pre>
<p>Want to go beyond forced password resets? Check our <a href="https://wppasswordpolicy.com/?utm_source=Password+Reset+Enforcement" rel="nofollow ugc">WP Password Policy</a> plugin to enforce strong password rules, block weak passwords, and set automatic expiry policies — so you’ll never need to force a password reset again. [https://wordpress.org/plugins/password-requirements/](Free version available on WordPress.org).</p>


Password Reset Enforcement


Would like that the user list auto-completes or searches the users.



Pressing enter on the settings page turned to page gray without any indication what may have happened.



Allow a save button to save settings before executing action.


Some quality of life needed

Easily enforce password reset for WordPress users. Choose to force password changes site-wide, by user and/or by role, to boost your site's security.

IP Blacklist for Cloudflare vs Password Reset Enforcement