Password Policy Manager Enterprise Plan

Which plan fits your WordPress site?

Password Policy Manager Enterprise and Premium extend the password management workflow with controls for password strength, expiry, resets, first-login requirements, inactive sessions, and multisite installations. Enterprise includes role-based first-login enforcement, inactivity logout, and network-wide password policies. Premium works with policies for selected roles or individual customers, custom login forms, and the listed Enterprise inactivity and multisite capabilities.

How do the password controls work?

Administrators can set password rules such as minimum and maximum length and other administrator-defined constraints. A strength meter and password score indicate whether passwords are strong, medium, or weak. Administrators can also review password strength and related password information in the administration workflow.

• Password expiry: Set a period after which users must create a new password.
• Change at next login: Require users to update their password the next time they log in.
• One-click reset: Invalidate current passwords and require users to generate new ones. A reset for users ends their current sessions and requires them to set a new strong password through email.

What does Enterprise add?

Enterprise lets administrators require selected user roles to create strong passwords on their first login. It can also log out inactive users and destroy their sessions after a customizable period. On a WordPress multisite installation, administrators can create password policies for the network.

What does Premium add?

Premium supports password policies by role or individual user. Its controls include requiring selected users to create strong passwords on first login, requiring specific roles to change passwords at their next login, and role-based one-click password reset and logout controls. It supports custom login forms, including WooCommerce, Elementor, and Ultimate Member. Premium also includes Enterprise inactivity logout and multisite policy management.

How should administrators apply the policies?

Set password length and strength constraints first, then review password scores to identify weak credentials. Require a password change or use a one-click reset when needed. For various account groups, assign policies by role or user. On multisite, configure the policy for the network.

What is involved in setup?

Install Password Policy Manager in WordPress, activate the paid edition, and configure its password rules and enforcement options. If you use a supported custom login form, configure the relevant policy for that login experience. Test first-login, expiry, reset, and inactivity settings with suitable accounts before applying them broadly.