WP Pwnd Passwords
Check WordPress user passwords against passwords previously appeared in data breaches.
by Jukka Rautanen · github.com/jukra/wp-pwnd-passwords · website
★ 2stars
6composer installs
0forks
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/jukra/wp-pwnd-passwords/archive/refs/heads/master.zipAlso on Packagist as jukkarau/wp-pwnd-passwords:
composer require jukkarau/wp-pwnd-passwordsFrom the readme
WP Pwnd Passwords
Check WordPress user passwords against passwords previously appeared in data breaches.
Features
- Uses Pwnd Passwords API range search to check the passwords
- Validates passwords on WordPress password reset form
- Validates passwords on WordPress user edit page
Why?
Even though WordPress offers password strength meter, many users might skip it and use their own passwords. This plugin at least prevents users from using passwords that are already appeared in some data breach. Bots bruteforcing WordPress logins use password lists that contain these passwords, so this plugin helps with users security.
Screenshots
Using bad password result