Home Plugins password requirements
WP Password Policy logo

WP Password Policy

by Teydea Studio on WordPress.org

Define advanced password policies, enforce strong password requirements, and improve your WordPress site's security.

(0)
Password policy configuration overview.

Password policy configuration overview.

WP Password Policy is the ultimate solution for WordPress administrators who want to ensure users always use strong, secure passwords. Protect your site from brute-force attacks, compromised credentials, and weak password practices by setting robust, customizable password policies.

Key benefits:

  • Reduce risk of unauthorized access.
  • Promote strong password hygiene.
  • Comply with security best practices for WordPress, eCommerce, and multisite networks.
  • Simple setup, flexible controls, and seamless integration.

Features at a glance:

  • Enforce minimum password length and complexity.
  • Set password expiration/maximum password age.
  • Prevent use of common, weak passwords (PRO).
  • Support for multisite networks.
  • Support for WooCommerce (PRO).
  • Define policies by user roles or individual users (PRO).
  • Prevent password reuse (PRO).
  • Translation-ready and easy to use.

Discover more at wppasswordpolicy.com.

Why strong password policies matter

Weak passwords are one of the most common causes of WordPress site hacks. By enforcing strong password rules, you reduce the chances of data breaches, unauthorized access, and compliance issues. Whether you run a single blog, manage client sites, or operate a WooCommerce store, this plugin helps you protect your users and business.

Features

Free Features

  • Enforce minimum password length: Set and enforce the minimum number of characters for user passwords.
  • Password complexity requirements: Require a mix of uppercase, lowercase, numbers, special characters, unique characters, and restrict use of parts of the username.
  • Set maximum password age: Force users to update their passwords periodically (e.g., every 30 days).
  • Apply policies globally: Enforce password rules for all users on your site with a single click.
  • Multisite/network support: Compatible with both standard and multisite WordPress installations.
  • Translation-ready: Localize the plugin into any language easily.

PRO Features

  • Prevent password reuse: Block users from reusing their previous passwords—encourage new, unique passwords every time.
  • Custom password policies for user groups: Assign different password rules for admins, editors, WooCommerce customers, or specific usernames.
  • Block common, weak passwords: Over 100,000 common passwords blacklisted—prevent users from choosing easy-to-guess passwords.
  • WooCommerce integration: Enforce password policies on WooCommerce account pages, password reset, and registration forms.
  • Priority support and updates: Get premium email support and frequent updates as a PRO user.

Upgrade and learn more about the PRO version at wppasswordpolicy.com.

Video Tutorial

See the plugin in action:

Active installations60+
Weekly downloads
73+48.98%
Version3.2.2
Last updated7/24/2025
WordPress version6.6
Tested up to6.8.2
PHP version7.4
Tags
password policypassword strengthpasswordssecuritystrong password