Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
WP Force Password
WP Force Password is a plugin that forces users to change their password for security purpose.
The facts
- Active installs
- 100+
- Price
- Free
- Last updated
- 2 Jun 2026
- Added
- Nov 2020
- Requires WP
- 5.6
- Tested up to
- WP 7.0.4
- Requires PHP
- 7.4
- Downloads
- 9,785
Our analysis
AI-assistedWP Force Password is a WordPress plugin designed to enhance security by managing user password updates. It allows you to set password reset days and specify user roles that are required to change their passwords regularly.
When a user's password expires, the plugin redirects them to the admin profile page or the lost password page, ensuring they update their password to continue using the site. It is suitable for site administrators looking to enforce password policies for users.
Best for: This plugin is best for WordPress site administrators focused on improving user account security.
What it does well
- ✓Allows setting of password reset days
- ✓Enforces password changes for specific user roles
- ✓Redirects users to update expired passwords
- ✓Sends reminder email notifications for expired passwords
Where it falls short
- •Limited information on additional features or customisation options
- •No published rating available
Verdict
WP Force Password offers essential tools for managing password security, though details on advanced features are limited.
From the developer
Galaxy Weblinks's own description of WP Force Password, lightly tidied.
This plugin is ideal for security reasons, provides password update reminders.
In the plugin settings, you can set Password Reset Days, and Select User roles will be required to reset their password regularly.
If the user password has expired this plugin redirects the login user to the admin screen profile.php page and the front end login lost password page wp-login.php to force change their password.
And also notice is displayed informing they must require to change their password to continue using this website.
Features of the Free WP Force Password plugin:
* Add password reset days
* Select user roles to allow the change expiry password
* Enable/Disable reset password feature for any user
* Force users to update expiry password
* Reminder email notification for password expired
Pro Features:
– Enable force password reset for all user based on the user regsitration date
Upgrade to Pro
Unlock powerful customization with the **Pro version**:
- WP Force Password PRO version
- Enable force password reset for all user based on the user regsitration date.
- Priority support and regular feature updates
Explore more here:
Documentation
Support
How can I disable notifications based on the WordPress environment
This plugin use wp_get_environment_type() to retrieve the current environment type.
the WP_ENVIRONMENT_TYPE in the wp-config.php file to disable the notification for all the environments except the production.
The type can be set via the WP_ENVIRONMENT_TYPE in wp-config.php file.
Possible values are ‘local’, ‘development’, ‘staging’, and ‘production’. If not set, the type defaults to ‘production’.
Refrence url
Tagged as
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)