BBS Password Policy

BBS Password Policy Enforce configurable password complexity and mandatory password rotation for WordPress privileged accounts (administrators by default). Light, self-contained, and ready for compliance use-cases such as CNSR: 15+ characters, 3 of 4 character classes, 90-day rotation. Built by Big Boss Studio. Features - Forces strong passwords: minimum length + N of 4 character classes (upper / lower / digit / special) - Blocks WordPress “Confirm use of weak password” bypass on create / edit for targeted roles - Mandatory rotation every N days, with admin redirect until the password is renewed - Pre-expiry warning notice in wp-admin - Role-scoped enforcement (default: administrator only) and optional user-ID exclusions - Validates profile, user-new, user-edit, password reset, and REST user create/update - English source strings + French translations (frFR) - Settings UI under Settings → Password Policy (manageoptions) - Clean uninstall (options + user meta, filterable) Requirements - PHP = 7.4 - WordPress = 6.0 Installation From GitHub Or download a release ZIP, then Plugins → Add New → Upload Plugin. Activate 1. Activate BBS Password Policy 2. Open Settings → Password