Secure User Accounts with Strong Password Policies Today

This plugin does not depend on any third-party libraries, plugins, or themes, and it works with the standard WordPress registration, login, and password reset flows. Sites that replace those flows (single sign-on (SSO), social login, or passwordless authentication) are not supported.

As with any plugin, we cannot guarantee compatibility with every theme, plugin, and hosting configuration; see our Terms and Conditions.

This plugin is translation-ready, enabling you to easily translate its content into your preferred language using any translation tool or plugin. By default, the plugin is provided in English.

This plugin requires WordPress version 6.6 or later and PHP version 7.4 or later. It doesn’t require additional libraries or special hosting configurations.

The plugin has been tested up to WordPress 6.9 and PHP 8.3.

We offer a risk-free, 30-day money-back guarantee. If you’re not satisfied with the plugin for any reason, you can request a full refund within 30 days of your purchase – no questions asked.

Yes! This plugin is actively maintained and regularly tested for compatibility with the latest versions of WordPress and PHP. For detailed information about updates, please refer to the changelog.

You can continue to use the plugin even if your license expires; however, you will no longer receive plugin updates, new features, or access to support. Your license renews automatically each year unless canceled via the Customer Portal.

Password policies are defined on the plugin settings page. You can create as many – or as few – policies as you need.

When creating a new policy, its settings are automatically populated with recommended rules and values, which you can freely adjust and customize.

There are two scenarios when this plugin verifies whether a user’s password complies with the matching password policy:

Scenario 1: During User Login

After a successful login, the plugin checks if the user’s password complies with the current password policy. If the password complies, the user will proceed uninterrupted. However, if the password is non-compliant, the user will be logged out of WordPress and prompted to reset their password.

The user must set a new password that meets the policy requirements before they can log in again and continue using their WordPress account.

Scenario 2: During Password Reset

When a user resets their password—either through the “Forgot Password” form or via their user profile—the new password must comply with the applicable password policy. The plugin prevents users from setting passwords that don’t meet these requirements.