Setting WP Admin passwords to expire

2 comments

1. I was busy writing up a plugin for this without even checking of one already existed. So I did a little research and found out that it does indeed already exist and that the path I was going down was the right one. Well, there’s no need to reinvent the wheel here, so here’s the link to the existing plugin.

   http://wordpress.org/extend/plugins/expire-password/

   Does what you need – I tested it myself.

   Log in to Reply

2. Login Security Solution will also do this, but in my opinion it’s not a good idea. If you force users to change their passwords too frequently, they’re more likely to get frustrated and adopt bad practices in order to make things easier for them.

   See these SE threads for more information:

   • How does changing your password every 90 days increase security
   • QotW #1: How does changing your password every 90 days increase security?
   • Is forcing users to change passwords useful
   • Is there a security benefit to a regular changing password policy?

   Log in to Reply