Marcin Pietrzak

This plugin empowers site administrators to establish and enforce password policies for users, ensuring compliance with the defined security standards. By implementing this tool, you can effectively prevent users from choosing weak or easily guessable passwords.
With this plugin, you gain the flexibility to configure various password requirements, such as complexity rules (e.g., length, character types), expiration policies, and more, enhancing the overall security of your site.
Enhance the security of your WordPress site with the Simple Password Policy plugin. This straightforward tool allows you to enforce robust password policies for all users, significantly improving your site’s protection against unauthorized access and password guessing attacks.
<h4>Key Features</h4>
<ul>
<li>Password Length Requirement: Set a minimum length for passwords to prevent short, easily guessable passwords.</li>
<li>Character Variety: Require passwords to include a mix of uppercase and lowercase letters, numbers, and special characters.</li>
<li>Password Expiration: Set passwords to expire after a specified period, prompting users to update their passwords regularly.</li>
</ul>
<h4>Benefits</h4>
<ul>
<li>Improved Security: Protect your site from brute-force attacks and unauthorized access by enforcing strong password policies.</li>
<li>Compliance: Meet security standards by implementing robust password policies.</li>
<li>User Guidance: Help users create strong, unique passwords with clear instructions.</li>
</ul>
<h4>GitHub</h4>
The Simple Password Policy plugin is available also on <a href="https://github.com/iworks/simple-password-policy" rel="nofollow ugc">GitHub – Simple Password Policy</a>.
<h4>How it works?</h4>
After installation, you can establish a password policy or require users to change weak passwords upon login.
<h4>See Room for Improvement?</h4>
Awesome! There are several ways you can get involved to help enhance Simple Password Policy:
Report Bugs: If you encounter a bug, error, or any other issue, please report it! Simply <a href="https://wordpress.org/support/plugin/simple-password-policy/#new-topic-0" rel="ugc">create a new topic in the plugin forum</a>. Once a developer verifies the bug, they’ll file an official <a href="https://github.com/iworks/simple-password-policy/issues/new" rel="nofollow ugc">report on GitHub</a>, where the issue will be addressed.
Suggest New Features: Got a great idea? We’d love to hear it! Start a new topic in the plugin forum to share your suggestion, explaining why the feature would be valuable. This opens up the discussion and helps us prioritize new enhancements.
Submit Pull Requests: If you’re a developer, the best way to contribute is by helping with <a href="https://github.com/iworks/simple-password-policy/issues" rel="nofollow ugc">existing issues on GitHub</a>. Be sure to check out our <a href="https://github.com/iworks/simple-password-policy/blob/master/contributing.md" rel="nofollow ugc">contributing guide for developers</a> to get started.
Thank you for helping us make Simple Password Policy better for everyone!
The plugin is available also on <a href="https://github.com/iworks/simple-password-policy/" rel="nofollow ugc">GitHub – Simple Password Policy</a>.

Simple Password Policy

Bartosz Gadomski

Teydea Studio

WP Password Policy is the ultimate solution for WordPress administrators who want to ensure users always use strong, secure passwords. Protect your site from brute-force attacks, compromised credentials, and weak password practices by setting robust, customizable password policies.
Key benefits:
<ul>
<li>Reduce risk of unauthorized access.</li>
<li>Promote strong password hygiene.</li>
<li>Comply with security best practices for WordPress, eCommerce, and multisite networks.</li>
<li>Simple setup, flexible controls, and seamless integration.</li>
</ul>
Features at a glance:
<ul>
<li>Enforce minimum password length and complexity.</li>
<li>Set password expiration/maximum password age.</li>
<li>Prevent use of common, weak passwords (PRO).</li>
<li>Support for multisite networks.</li>
<li>Support for WooCommerce (PRO).</li>
<li>Define policies by user roles or individual users (PRO).</li>
<li>Prevent password reuse (PRO).</li>
<li>Translation-ready and easy to use.</li>
</ul>
Discover more at <a href="https://wppasswordpolicy.com/?utm_source=WP+Password+Policy" rel="nofollow ugc">wppasswordpolicy.com</a>.
Why strong password policies matter
Weak passwords are one of the most common causes of WordPress site hacks. By enforcing strong password rules, you reduce the chances of data breaches, unauthorized access, and compliance issues. Whether you run a single blog, manage client sites, or operate a WooCommerce store, this plugin helps you protect your users and business.
<h3>Features</h3>
Free Features
<ul>
<li>Enforce minimum password length: Set and enforce the minimum number of characters for user passwords.</li>
<li>Password complexity requirements: Require a mix of uppercase, lowercase, numbers, special characters, unique characters, and restrict use of parts of the username.</li>
<li>Set maximum password age: Force users to update their passwords periodically (e.g., every 30 days).</li>
<li>Apply policies globally: Enforce password rules for all users on your site with a single click.</li>
<li>Multisite/network support: Compatible with both standard and multisite WordPress installations.</li>
<li>Translation-ready: Localize the plugin into any language easily.</li>
</ul>
PRO Features
<ul>
<li><a href="https://wppasswordpolicy.com/features/passwords-reuse-prevention/?utm_source=WP+Password+Policy" rel="nofollow ugc">Prevent password reuse</a>: Block users from reusing their previous passwords—encourage new, unique passwords every time.</li>
<li><a href="https://wppasswordpolicy.com/features/dedicated-policies-by-user-and-or-role/?utm_source=WP+Password+Policy" rel="nofollow ugc">Custom password policies for user groups</a>: Assign different password rules for admins, editors, WooCommerce customers, or specific usernames.</li>
<li><a href="https://wppasswordpolicy.com/features/restricted-passwords-list/?utm_source=WP+Password+Policy" rel="nofollow ugc">Block common, weak passwords</a>: Over 100,000 common passwords blacklisted—prevent users from choosing easy-to-guess passwords.</li>
<li>WooCommerce integration: Enforce password policies on WooCommerce account pages, password reset, and registration forms.</li>
<li>Priority support and updates: Get premium email support and frequent updates as a PRO user.</li>
</ul>
Upgrade and learn more about the PRO version at <a href="https://wppasswordpolicy.com/pricing/?utm_source=WP+Password+Policy" rel="nofollow ugc">wppasswordpolicy.com</a>.
<h3>Video Tutorial</h3>
See the plugin in action:
<iframe loading="lazy" title="WP Password Policy plugin walkthrough" width="750" height="563" src="https://www.youtube.com/embed/7g_hWHZ4IFs?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>

WP Password Policy

Define advanced password policies, enforce strong password requirements, and improve your WordPress site's security.

Simple Password Policy vs WP Password Policy