Skip to main content
Weak passwords are a common security issue in WordPress sites, allowing user accounts to be easily compromised. Strong password policies can be set up and configured by WordPress administrators to improve data and site security. This article explains how to use the Password Policy Manager plugin to configure WordPress password policies.

​
Configuring password policies for WordPress

To set up and configure password policies for WordPress, follow these steps:
  1. Log in to WordPress as the administrator.
  2. On the Dashboard in the left sidebar, click Plugins, and then click Add New.
  3. Search for “Password Policy Manager” and click Install Now. Then click Activate the plugin:
    Password Policy Manager plugin
  4. On the Dashboard, in the left sidebar click miniOrange Password policy, and then click Password Policy:
    miniOrange Password Policy settings
  5. In the Policy Settings section, check all the password characters option, and set the length to 8:
    Password Policy setting page
  6. Set the password expiration time according to the organisation policy or to 12 weeks (every three months):
    Password Expiry time setting page
  7. Click Save Settings to save and setup password policies for all users:

​
More information

For more information about WordPress security, please visit: https://www.hosting.com/blog/5-top-wordpress-security-plugins/