Password Policy Manager Enterprise Plan

Set password rules for the website

Password Policy Manager helps WordPress administrators define password requirements and manage credential changes. The Enterprise and Premium plans extend the core process with password strength checks, expiry, resets, first-login requirements, inactivity controls, and multisite policies.

Administrators can set minimum and maximum password lengths and other administrator-defined constraints. A strength meter and password score classify passwords as strong, medium, or weak. The administration workflow also lets administrators review password strength and related password information.

Choose when users update credentials

• Password expiry: Set a custom period after which users must make a new password.
• Change at next login: Require users to change their password the next time they sign in.
• One-click reset: Invalidate current passwords and require users to generate new ones. When used for users, the reset ends their current sessions and requires them to set a new strong password through email.

Apply controls by plan

Enterprise for roles and multisite networks

The Enterprise plan lets administrators require selected roles to create strong passwords on their first login. It also works with logging users out and destroying their sessions after a customizable period of inactivity, and creating password policies for an entire WordPress multisite network.

Premium for selected users and login forms

The Premium plan supports role-based and user-based password policies. Administrators can require selected users to create strong passwords on first login, require specific roles to change passwords at their next login, and use role-based one-click reset and logout controls. Premium supports custom login forms, including WooCommerce, Elementor, and Ultimate Member. It also includes the Enterprise inactivity logout and multisite capabilities.

Configure and check the workflow

1. Install Password Policy Manager in WordPress, activate the paid edition, and configure its password rules and enforcement settings.
2. Set length and strength constraints, then review password scores. Enforce a password change or use a one-click reset when needed.
3. For different account groups, assign policies by role or user. On a multisite installation, configure the policy for the network.
4. If you use a supported custom login form, configure the relevant policy for that login experience.
5. Test first-login, expiry, reset, and inactivity settings with suitable accounts before applying them broadly.