WP Manifestindependent plugin directory
manifest / security / wp-pwnd-passwords

WP Pwnd Passwords

Check passwords against known pwnd passwords

by Jukka Rautanen · github.com/jukra/wp-pwnd-passwords · website

★ 2stars
6composer installs

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/jukra/wp-pwnd-passwords/archive/refs/heads/master.zip

On Packagist as jukkarau/wp-pwnd-passwords:

composer require jukkarau/wp-pwnd-passwords
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
From the readme github.com/jukra/wp-pwnd-passwords ↗
WP Pwnd Passwords Check WordPress user passwords against passwords previously appeared in data breaches. Features - Uses Pwnd Passwords API range search to check the passwords - Validates passwords on WordPress password reset form - Validates passwords on WordPress user edit page Why? Even though WordPress offers password strength meter, many users might skip it and use their own passwords. This plugin at least prevents users from using passwords that are already appeared in some data breach. Bots bruteforcing WordPress logins use password lists that contain these passwords, so this plugin helps with users security. Screenshots Using bad password result