edward_plainview

<p>Prevent password resets or changes to specific users or user roles. User-specific exceptions to the sweeping user roles can be set. The user’s password is then protected from modification:</p>
<ul>
<li>In the user’s profile editor</li>
<li>Using the password reset link in the login window</li>
</ul>
<p>The settings are available to either the super admin on the network, or normal admins on a single installation. If you wish to hide the settings completely, put the following in your wp-config.php:</p>
<pre><code>define( 'PLAINVIEW_PROTECT_PASSWORDS_HIDE', true );
</code></pre>
<p>Requires PHP 5.4.</p>


Plainview Protect Passwords

I love that is works well with network sites so I don't have to replicate my settings across each of my sites. 

The only issue I ran into is that only network roles are added to the network settings. Maybe it's by design, but it would be awesome if it picked up the roles from the sites because that is where plugins like User Role Editor and WooCommerce have registered them. In order to protect these I would have to modify the settings for each of my network sites separately. Annoying but totally doable. 

Thanks for the quick and easy solution today!

Gets the job done

Selectively protect passwords from being reset or modified.

Michael Finkenberger

<p><strong>WP Access Control Center</strong> is a powerful security control center for WordPress administrators who want full control over authentication, sessions, and password policies.</p>
<p>Take control of your site’s access layer with real-time session monitoring, flexible two-factor authentication, and powerful emergency tools — all in one place.</p>
<h3>🔐 Two-Factor Protection</h3>
<ul>
<li>Email-based verification codes</li>
<li>TOTP support (Google Authenticator, Microsoft Authenticator, Authy, etc.)</li>
<li>Role-based enforcement</li>
<li>Grace periods for smooth rollout</li>
<li>Backup codes for account recovery</li>
<li>Trusted devices to reduce login friction</li>
</ul>
<h3>👁️ Live Session Control</h3>
<ul>
<li>Real-time overview of all active sessions (AJAX-powered)</li>
<li>Inspect session details and parameters</li>
<li>Instantly terminate individual or all sessions</li>
<li>Monitor user activity as it happens</li>
</ul>
<h3>🔑 Password Policies</h3>
<ul>
<li>Enforce password strength requirements</li>
<li>Prevent password reuse</li>
<li>Define role-based password expiration</li>
<li>Real-time feedback during password creation</li>
</ul>
<h3>⚡ Bulk Password Reset</h3>
<ul>
<li>Reset passwords for roles or selected users</li>
<li>Optionally terminate related sessions</li>
<li>Automatic email notifications (fully customizable)</li>
</ul>
<h3>🔄 Security Key Rotation</h3>
<ul>
<li>One-click regeneration of WordPress KEYs & SALTs</li>
<li>Immediately invalidates all active sessions</li>
<li>Essential for incident response</li>
</ul>
<h3>⏱️ Advanced Session Control</h3>
<ul>
<li>Configure session lifetime per role</li>
<li>Separate rules for “Remember Me”</li>
<li>Automatic cleanup of expired sessions</li>
</ul>
<h3>🎨 Login Experience Designer</h3>
<ul>
<li>Customize the 2FA login page</li>
<li>Background images (outer & inner)</li>
<li>Flexible CSS customization</li>
<li>Safe defaults – no changes unless configured</li>
</ul>
<p><strong>No external services required.</strong> Everything runs locally within your WordPress installation.</p>


WP Access Control Center

Take full control over authentication, sessions, and password security in WordPress – including real-time session monitoring, 2FA, and emergency tools

Plainview Protect Passwords vs WP Access Control Center