Will Anderson

Tony Ferrell

WordPress profile pages contain a visual indicator which shows the strength of a user’s chosen password. This is nice, but WordPress doesn’t actually enforce this in any way, so users are free to select weak passwords.
Minimum Password Strength uses the same method to calculate a password’s strength, but forces users to meet a minimum strength requirement before they can change their password.
By default, passwords must have “Medium” strength, but administrators can change this to force passwords to be at least “Weak”, “Medium”, or “Strong”. To change the minimum strength, go to Settings -> Password Strength after installing Minimum Password Strength.
For now, all users have the same password strength requirements, but a later release will allow administrators to select different strength requirements for different roles.

Minimum Password Strength

Enforce a specific password strength. Uses the same strength calculations as the WordPress password strength meter

rob.divincenzo

This plugin allows you to set passwords to expire every X amount of days (default is 90) and to expire all non-admin user passwords (requiring new unique passwords).

WP Expire Passwords

This plugin allows you to set passwords to expire every X amount of days (default is 90) and to expire all non-admin user passwords (requiring new uni …

Minimum Password Strength vs WP Expire Passwords