Takashi Ito

Melmium provides custom authentication pages for building a membership site on WordPress. It replaces the default wp-login.php flow with theme-integrated pages for registration, login, and password reset.
Features:
<ul>
<li>Custom authentication pages (register, login, logout, password reset)</li>
<li>Email-based registration flow with token verification</li>
<li>Template override support — customize templates in your theme’s <code>auth/</code> directory</li>
<li>Google reCAPTCHA Enterprise integration (optional)</li>
<li>Configuration via <code>wp-config.php</code> constants (no settings page required)</li>
</ul>
日本語:
Melmium は WordPress で会員制サイトを構築するためのプラグインです。カスタム認証ページ（会員登録・ログイン・パスワードリセット）を提供し、テーマ側でテンプレートを自由にカスタマイズできます。
<h3>External Services</h3>
This plugin optionally connects to the Google reCAPTCHA Enterprise service for bot detection on authentication forms (registration, login, and password reset).
When data is sent: When the <code>MELMIUM_RECAPTCHA_ENABLED</code> constant is set to <code>true</code> in <code>wp-config.php</code>, a reCAPTCHA token is sent to Google’s servers each time a user submits an authentication form.
What data is sent: The reCAPTCHA token generated by the user’s browser and the site key configured for your project.
Service provider: Google LLC
<ul>
<li><a href="https://policies.google.com/terms" rel="nofollow ugc">Google reCAPTCHA Terms of Service</a></li>
<li><a href="https://policies.google.com/privacy" rel="nofollow ugc">Google Privacy Policy</a></li>
</ul>
If reCAPTCHA is not enabled (default), no data is sent to any external service.

Melmium

A minimal plugin to help you build a membership site with custom authentication pages.

Bartosz Gadomski

Teydea Studio

Enhance your WordPress website’s security by forcing users to reset their passwords.
Password Reset Enforcement is a simple yet powerful security plugin that allows site administrators to require users to update their passwords—ideal after a potential data breach, routine security checks, or during onboarding/offboarding processes.
<h3>Features</h3>
<ul>
<li>Force password reset for all users, specific user roles, or individual users.</li>
<li>Optional email notification to users with a direct reset link.</li>
<li>Flexible login behavior:
<ul>
<li>Allow login before resetting: users log in with the old password, are immediately prompted to set a new one.</li>
<li>Block login until reset: users must reset their password before accessing the dashboard.</li>
</ul>
</li>
<li>Choose reset timing:
<ul>
<li>Immediately: forces logout and password reset on next login.</li>
<li>After session expiry: users are asked to reset after their current session ends.</li>
</ul>
</li>
<li>WP-CLI support for command-line password management and automation.</li>
<li>Multisite compatible (network-wide reset only).</li>
<li>Optimized for performance on large-scale and enterprise WordPress installations.</li>
</ul>
<h3>Use Cases</h3>
<ul>
<li>Responding to a security breach or suspected compromise.</li>
<li>Enforcing routine password changes in corporate environments.</li>
<li>Applying onboarding/offboarding security policies for teams or membership sites.</li>
</ul>
<h3>Compatibility</h3>
<ul>
<li>Works on both single-site and multisite (network) WordPress setups.</li>
<li>Supports PHP 7.4+ and WordPress 6.6 through 7.0.</li>
<li>Compatible with modern WordPress admin experience.</li>
</ul>
<h3>WP-CLI Commands</h3>
This plugin provides WP-CLI commands for automated password reset management:
Force Password Reset 
 wp password-reset-enforcement force [–to_all] [–to_roles=] [–to_users=] [–applicability=] [–with_email] [–with_current_password_allowed] [–limit=] [–paged=]
Clear Password Reset Enforcement 
 wp password-reset-enforcement clear [–to_all] [–to_roles=] [–to_users=] [–limit=] [–paged=]
List Users with Enforced Password Reset 
 wp password-reset-enforcement list [–limit=] [–paged=]
Check Password Reset Status 
 wp password-reset-enforcement status [–to_all] [–to_roles=] [–to_users=] [–limit=] [–paged=]
<h4>Command Options</h4>
<ul>
<li><code>--to_all</code>: Target all users on the site</li>
<li><code>--to_roles=<roles></code>: Comma-separated list of user roles (e.g., editor,administrator)</li>
<li><code>--to_users=<user_ids></code>: Comma-separated list of specific user IDs (e.g., 1,5,10)</li>
<li><code>--applicability=<when></code>: When reset takes effect (immediately, after_session_expiry)</li>
<li><code>--with_email</code>: Send email notifications to affected users (default: true)</li>
<li><code>--with_current_password_allowed</code>: Allow users to reuse current password (default: false)</li>
<li><code>--limit=<number></code>: Maximum users to process in single operation</li>
<li><code>--paged=<page></code>: Page number for pagination</li>
</ul>
<h4>Command Examples</h4>
<pre><code>wp password-reset-enforcement force --to_all
wp password-reset-enforcement force --to_roles=editor,administrator --applicability=after_session_expiry
wp password-reset-enforcement clear --to_users=1,5,10
wp password-reset-enforcement list --limit=50 --paged=2
wp password-reset-enforcement status --to_all --limit=50 --paged=2<h3>Related Plugins</h3>
</code></pre>
Want to go beyond forced password resets? Check our <a href="https://wppasswordpolicy.com/?utm_source=Password+Reset+Enforcement" rel="nofollow ugc">WP Password Policy</a> plugin to enforce strong password rules, block weak passwords, and set automatic expiry policies — so you’ll never need to force a password reset again. [https://wordpress.org/plugins/password-requirements/](Free version available on WordPress.org).

Password Reset Enforcement


Would like that the user list auto-completes or searches the users.



Pressing enter on the settings page turned to page gray without any indication what may have happened.



Allow a save button to save settings before executing action.


Some quality of life needed

Easily enforce password reset for WordPress users. Choose to force password changes site-wide, by user and/or by role, to boost your site's security.

Melmium vs Password Reset Enforcement