harrym

WordPress uses phpass to store passwords. Because WordPress has to work everywere, it uses the portable version of phpass, 
which uses MD5 to hash passwords. MD5 is not a very good hashing algorithm for passwords, because it’s relatively fast.
This plugin switches over to bcrypt, which is the algorithm recommended by phpass, and is a much better option for password 
storage because it is much slower to produce. This makes it much harder for an attacker who’s managed to access your hashed 
passwords to obtain plain text passwords by brute-forcing, or by trying passwords from a dictionary.
Note: this plugin requires PHP 5.3.0 or newer
Be aware that if you use this plugin and then move to a host that does not support bcrypt, you will need to reset any user 
account that you want to log in with.

wp-bcrypt

wp bcrypt switches WordPress's password hashes from MD5 to bcrypt, making it harder for them to be brute-forced if they are leaked.

Bartosz Gadomski

Teydea Studio

WP Password Policy is the ultimate solution for WordPress administrators who want to ensure users always use strong, secure passwords. Protect your site from brute-force attacks, compromised credentials, and weak password practices by setting robust, customizable password policies.
Key benefits:
<ul>
<li>Reduce risk of unauthorized access.</li>
<li>Promote strong password hygiene.</li>
<li>Comply with security best practices for WordPress, eCommerce, and multisite networks.</li>
<li>Simple setup, flexible controls, and seamless integration.</li>
</ul>
Features at a glance:
<ul>
<li>Enforce minimum password length and complexity.</li>
<li>Set password expiration/maximum password age.</li>
<li>Prevent use of common, weak passwords (PRO).</li>
<li>Support for multisite networks.</li>
<li>Support for WooCommerce (PRO).</li>
<li>Define policies by user roles or individual users (PRO).</li>
<li>Prevent password reuse (PRO).</li>
<li>Translation-ready and easy to use.</li>
</ul>
Discover more at <a href="https://wppasswordpolicy.com/?utm_source=WP+Password+Policy" rel="nofollow ugc">wppasswordpolicy.com</a>.
Why strong password policies matter
Weak passwords are one of the most common causes of WordPress site hacks. By enforcing strong password rules, you reduce the chances of data breaches, unauthorized access, and compliance issues. Whether you run a single blog, manage client sites, or operate a WooCommerce store, this plugin helps you protect your users and business.
<h3>Features</h3>
Free Features
<ul>
<li>Enforce minimum password length: Set and enforce the minimum number of characters for user passwords.</li>
<li>Password complexity requirements: Require a mix of uppercase, lowercase, numbers, special characters, unique characters, and restrict use of parts of the username.</li>
<li>Set maximum password age: Force users to update their passwords periodically (e.g., every 30 days).</li>
<li>Apply policies globally: Enforce password rules for all users on your site with a single click.</li>
<li>Multisite/network support: Compatible with both standard and multisite WordPress installations.</li>
<li>Translation-ready: Localize the plugin into any language easily.</li>
</ul>
PRO Features
<ul>
<li><a href="https://wppasswordpolicy.com/features/passwords-reuse-prevention/?utm_source=WP+Password+Policy" rel="nofollow ugc">Prevent password reuse</a>: Block users from reusing their previous passwords—encourage new, unique passwords every time.</li>
<li><a href="https://wppasswordpolicy.com/features/dedicated-policies-by-user-and-or-role/?utm_source=WP+Password+Policy" rel="nofollow ugc">Custom password policies for user groups</a>: Assign different password rules for admins, editors, WooCommerce customers, or specific usernames.</li>
<li><a href="https://wppasswordpolicy.com/features/restricted-passwords-list/?utm_source=WP+Password+Policy" rel="nofollow ugc">Block common, weak passwords</a>: Over 100,000 common passwords blacklisted—prevent users from choosing easy-to-guess passwords.</li>
<li>WooCommerce integration: Enforce password policies on WooCommerce account pages, password reset, and registration forms.</li>
<li>Priority support and updates: Get premium email support and frequent updates as a PRO user.</li>
</ul>
Upgrade and learn more about the PRO version at <a href="https://wppasswordpolicy.com/pricing/?utm_source=WP+Password+Policy" rel="nofollow ugc">wppasswordpolicy.com</a>.
<h3>Video Tutorial</h3>
See the plugin in action:
<iframe loading="lazy" title="WP Password Policy plugin walkthrough" width="750" height="563" src="https://www.youtube.com/embed/7g_hWHZ4IFs?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>

WP Password Policy

Define advanced password policies, enforce strong password requirements, and improve your WordPress site's security.

wp-bcrypt vs WP Password Policy