WP Password Policy

Àpèjúwe

WP Password Policy lets you define and enforce password policies for all users on your WordPress site.

Set rules for password length, complexity (uppercase, lowercase, digits, special characters), restricted characters, password expiration, and more. The plugin validates passwords on login, registration, password changes, and during active sessions Ìtumọ̀ Yorùbá: — automatically redirecting users to reset non-compliant passwords.

Key benefits:

• Enforce password length and complexity rules from a single settings page.
• Set password expiration to ensure users update their passwords regularly.
• Require users to confirm their current password before making changes.
• Compatible with WordPress multisite networks.

Whether you manage a personal blog, a membership site, or a multisite network, WP Password Policy helps you maintain consistent password standards across all user accounts.

Learn more at wppasswordpolicy.com.

Why password policies matter

Weak passwords remain one of the most common entry points for unauthorized access to WordPress sites. Enforcing password rules helps reduce this risk and supports compliance with security best practices.

Features

Free Features

• Minimum password length Ìtumọ̀ Yorùbá: — Set and enforce the minimum number of characters for user passwords.
• Maximum password length Ìtumọ̀ Yorùbá: — Limit password length to prevent denial-of-service attacks caused by hashing very long passwords.
• Password complexity rules Ìtumọ̀ Yorùbá: — Require a mix of uppercase letters, lowercase letters, digits, special characters, and a minimum number of unique characters.
• Consecutive username symbols Ìtumọ̀ Yorùbá: — Restrict how many consecutive characters from the username can appear in the password.
• Restricted characters Ìtumọ̀ Yorùbá: — Block specific characters from being used in passwords.
• Maximum password age Ìtumọ̀ Yorùbá: — Force users to update their passwords periodically (e.g., every 30 days).
• Minimum password age Ìtumọ̀ Yorùbá: — Prevent users from changing their password too frequently, discouraging rapid cycling back to an old password.
• Require current password Ìtumọ̀ Yorùbá: — Add a “Current Password” field to the user profile screen and validate it before allowing password changes.
• Custom password hints Ìtumọ̀ Yorùbá: — Replace the default WordPress password hint with a policy-specific hint based on active rules.
• Site Health integration Ìtumọ̀ Yorùbá: — A Site Health test reports whether your plugin settings are properly configured.
• Multisite/network support Ìtumọ̀ Yorùbá: — Works with both standard and multisite WordPress installations.
• AI integration Ìtumọ̀ Yorùbá: — On WordPress 6.9+ with the MCP Adapter plugin, list, configure, and delete password policies through natural language commands from any connected AI provider.
• Translation-ready Ìtumọ̀ Yorùbá: — Localize the plugin into any language.

PRO Features

• Prevent password reuse Ìtumọ̀ Yorùbá: — Block users from reusing their previous passwords, encouraging new, unique passwords every time.
• Custom password policies per role or user Ìtumọ̀ Yorùbá: — Assign different password rules for administrators, editors, WooCommerce customers, or specific users.
• Block common, weak passwords Ìtumọ̀ Yorùbá: — Over 100,000 common passwords are blocked, preventing users from choosing easy-to-guess passwords.
• Integrations:
  • WooCommerce integration Ìtumọ̀ Yorùbá: — Enforce password policies on WooCommerce login, registration, checkout account creation (including Store API), account details, password change, and password reset forms. Replaces WooCommerceÌtumọ̀ Yorùbá: ’s built-in password strength meter with your policy rules.
  • Ultimate Member integration Ìtumọ̀ Yorùbá: — Enforce password policies within Ultimate Member registration, login, password reset, and password change forms. Disables Ultimate MemberÌtumọ̀ Yorùbá: ’s built-in password strength option to avoid conflicts.
  • Tutor LMS integration Ìtumọ̀ Yorùbá: — Enforce password policies on Tutor LMS student and instructor registration, login, password change, and password reset forms.
  • LifterLMS integration Ìtumọ̀ Yorùbá: — Enforce password policies on LifterLMS registration (including checkout), account password change, and password reset forms. Replaces LifterLMSÌtumọ̀ Yorùbá: ’s built-in password strength meter with your policy rules.
  • LearnPress integration Ìtumọ̀ Yorùbá: — Enforce password policies on LearnPress registration, login, and password change forms.
• Priority support and updates Ìtumọ̀ Yorùbá: — Get premium email support and updates.

Learn more about the PRO version at wppasswordpolicy.com/pricing.

Video Tutorial

See the plugin in action:

Related Plugins

Looking for a way to force users to reset their passwords immediately? Check our Password Reset Enforcement plugin Ìtumọ̀ Yorùbá: — it lets you require password resets site-wide, by role, or for individual users, with WP-CLI support for automation.