=== Password Policy Manager | Password Manager ===


Contributors: miniOrange
Tags:  Reset Password, Password Security, Strong password, Secure Password, Password strength, password score, force password change, Users password manager, Generate Random  Passwords, One Click password reset, password audit report, Enforce strong password
Donate link: https://miniorange.com
Requires at least: 4.6
Tested up to: 6.8
Requires PHP: 5.3.0
Stable tag: 2.0.6
License: Expat
License URI: https://plugins.miniorange.com/mit-license


Enforce strong passwords with expiry, reset, score checks, inactive user lock, and user password management using Password Policy Manager.


== Description ==


[Features](https://plugins.miniorange.com/password-policy-manager) | [Setup Guide](https://plugins.miniorange.com/setup-password-policy-manager-to-enforce-wordpress-password-security) | [Documentation](https://plugins.miniorange.com/password-policy-manager#free-demo)

==  Enforce Strong and Secure Password Policies with Password Policy Manager==


  The miniOrange **Password Policy Manager** plugin helps you enforce strong and secure password policies with features like **password reset**, **password expiry**, **password score**, and **strong password rules**.

You can manage user passwords efficiently using the user password manager, password strength meter, and history manager to enhance overall password security.
In case of a breach, take quick action with one-click password reset, lock inactive users, and enforce random password rules.

 This ensures complete protection by securing passwords, and managing both active and lock inactive users to prevent password-based attacks.
Have questions? Reach us at **mfasupport@xecurify.com**

== What is the Password Policy Manager Plugin for WordPress? ==

WordPress plugin for password expiry, strength check, and secure policy enforcement. Easy to install and configure, this Password Security plugin secures your site without disrupting the user experience.


[youtube https://youtu.be/ZnwEDbedz1A]



== WordPress PPM Key Features (Free Version) ==

* **Enforce strong passwords:** Force all users to create strong passwords according to the password policy set by the admin for high Password Security.
* **[Users password manager:](https://plugins.miniorange.com/how-to-setup-password-policy-setting-wordpress-password-policy-plugin)** User password manager allows the admin to manage the users’ passwords (like password strength, how many passwords are strong, etc) to check the Password Security. [password policy setup guide]
* **Enforce password change:** Administrators can force users to change their password on their next login using this functionality use to enforce strong passwords on their users and ensure strong Password Security.
* **[One click reset password:](https://plugins.miniorange.com/how-to-set-one-click-reset-password-setting-wordpress-password-policy-plugin)** This feature allows the admin to invalidate the current password and force their users to generate a new strong password. This can be done for all users in case of any breach. This will kill all the current sessions and users will be forced to set a new strong password via email hence reinforcing the Password Security.
* **[Password Score:](http://plugins.miniorange.com/how-to-set-password-score-or-password-strength-checker-password-policy)** It will show all the users’ password strengths. You can check whether the passwords being used are strong, medium or weak. Based on that you can use the enforce strong passwords feature to improve Password Security.
* **[Auto Password Expiry:](https://plugins.miniorange.com/how-to-setup-password-expiry-time-wordpress-password-policy-plugin)** This feature allows the admin to enforce a custom time-based password expiry to improve Password Security. Once the password has expired, the users will be forced to create a new password.
* **Password strength:** The admin can set the minimum and maximum length of the password. You can also add constraints that you want your users to follow while setting a strong password.
* **Unlimited Users:** There is no user limit on the password policy manager plugin and it can be used to create password policies for unlimited users.


== Which Key Features does Password Policy Manager support in the Enterprise Plan? ==

1. **Role-Based Enforce Strong Password on First Login:** Force specific users roles to create strong passwords according to the password policy set by the admin on their first login.
2. **User-Based One-click password Reset and Logout:** Admin can reset passwords of users at once and terminate their logged-in sessions with just one click in case of any suspicious activity using the One-click reset password. Admin can then send password reset links over email.
3. **Custom Redirect URL:** The admin can redirect their users to a different [custom URL](https://plugins.miniorange.com/how-to-set-custom-redirect-url-password-policy-manager-on-wordpress) using this functionality.
4. **Active & Inactive Users Activity Log:** The admin can track the activity of all active as well as lock inactive users using this tool of the Password Policy Enterprise plan.
5. **Logout Inactive Users:** When this setting is enabled, a user is logged out and their session is destroyed if they are inactive for more than the customizable set time limit.
6. **Multisite:** The Password Policy Manager Enterprise plugin is multisite compatible and can be used to create password policies for an entire multisite network.

For any customization-related queries, reach us at mfasupport@xecurify.com or call us at +1 9786589387.

 == Upgrade to miniOrange Password Policy Manager Premium Plan for Advanced Security ==

The premium plan of miniOrange WordPress Password Policy Manager gives you complete control over how users can secure passwords, helping you enforce policies across all roles, customize the login experience, and secure even the most complex WordPress setups.

With the premium **Password Policy Manager** plugin offers advanced **password security features**, including role-based and user-based password policies. It also supports custom login forms like WooCommerce, Elementor, Ultimate Member, and more.

 = Premium Features List =
>+ **[Role-Based and User-Based Password Policies:](https://plugins.miniorange.com/how-to-set-password-policy-role-based)** Admin can set different [role-based as well as user-based policies] and enforce password policy changes to ensure strong Password Security.
>+ **User-Based Enforce Strong Password on First Login:** Force a specific set of users to create strong passwords according to the password policy set by the admin on their first login to maintain strong Password Security. 
>+ **Role-Based Enforce Password Change:** Administrators can enforce specific sets of roles to change their passwords on their next login using this configuration to enhance Password Security.
>+ **[Role-Based One-click password Reset and Logout:](https://plugins.miniorange.com/how-to-set-one-click-reset-password-policy-role-based)** Using [one-click reset password])  feature, the admin can reset passwords of all users / particular roles at once and terminate all logged-in sessions with just one click in case of any suspicious activity. Admin can then send the password reset link over email.
>+ **[Generate Random Passwords:](https://plugins.miniorange.com/how-to-generate-random-password)** Generate random passwords generates a random strong password containing all variations to make the password security strong and secure against brute force attacks.
>+ **[Automatically Lock Inactive Users:](https://plugins.miniorange.com/how-to-apply-automatically-lock-inactive-user)** It will lock the user automatically if the user is inactive for the custom-specified time period. This can be set for particular roles as well as users.
>+ **[Password History Manager:](https://plugins.miniorange.com/how-to-set-password-history-management)** It will manage the history of all the recently used passwords for each user, so no user can reuse a previous password.
>+ **Active Users Activity Log:** The admin can track the activity of all Active Users using this setting of the Password Policy Premium plan.
>+ **Custom Login Forms Supported:**  The Premium plan also supports the following custom login forms: WooCommerce, Ultimate Member, Elementor Pro, BBPress, Gravity Forms, Ninja Forms, Buddy Press, User Registration, User Pro, MemberPress, and many others.
>+ **Single Site:** The Password Policy Manager Premium plugin is single-site compatible and can be used to create password policies on only one site at a time.

 == Why You Need to Register with miniOrange ==
Some advanced features in the **Password Policy Manager** plugin, like one-click password reset and random password generation.
Core functionalities such as enforcing strong password policies, password expiry, password history, and locking inactive users work without registration.

 Customized solutions and active support for the miniOrange Password Policy Manager plugin are available. Email us at mfasupport@xecurify.com or call us at +1 9786589387.




== Installation ==

= From your WordPress dashboard =
1. Navigate to `Plugins > Add New` from your WP Admin dashboard.
2. Search for `password policy manager.
3. Install `password policy manager` and Activate the plugin.


= From WordPress.org =
1. Search for `password policy manager` and download it.
2. Unzip and upload the `password policy manager` directory to your `/wp-content/plugins/` directory.
3. Activate the password policy manager from the Plugins tab of your admin dashboard.


 == Frequently Asked Questions ==


 = How do I enable the Password policy? =

 You can enable the Password Policy from the plugin’s Settings tab. Once enabled, features like strong password enforcement, password expiry, and one-click password reset are active.

If a user hasn't logged in yet, they will be prompted to change their password during login if policies are enforced.


 = I want to enable only password expiration for my users. What should I do? =

 You can enable only the password expiration feature from the Password Policy tab and save the settings. This ensures users reset passwords after a defined period. 


= How do I setup Password Policy once the plugin is activated? =

1. Select "Password Policy Manager" from the WordPress left menu.
2. Configure features like strong passwords, password history, auto password expiry, and enforce them.
3. Save the settings to apply WordPress password policies site-wide.


 = How Can I Enforce Strong Passwords for all users apart from the WordPress default feature? = 

 The Password Policy plugin lets you enforce strong passwords by defining rules like minimum length, special characters, and uppercase letters during user creation or login.


 = What Differentiates miniOrange Password Policy from other Password Policy Plugins? =

1. Enforces strong and secure passwords site-wide.
2. Allows role-based password rules and expiration.
3. Supports one-click reset for all users.
4. Tracks password history and logout inactive users.
5. Offers better control over user password security than most plugins.


 = Do you guys provide support? What should I do if I want features which are not mentioned here? =

 Yes, we offer full support and can help you add custom password policy features tailored to your site. Just reach out to our support team.

 For any customization-related queries or if you require any assistance, email us at mfasupport@xecurify.com or call us at +1 9786589387.
 

== Screenshots ==

1. Manual strong password
2. Check for password strength
3. Enable Expiration time
4. User Login Report


== Changelog ==

= 2.0.6 =

* Security Fixes - User Profile

= 2.0.5 =

* Vulnerability Fixes

= 2.0.4 =

* Code Optimizations

= 2.0.3 =

* Vulnerability Fixes
* Compatibility with WordPress 6.8

= 2.0.2 =

* Bug fixes
* Improvement - Password Reset Form
* Compatibility with WP 6.7.2

= 2.0.1 =

* Bug fixes
* Code Optimizations
* Compatibility with WP 6.5

= 2.0.0 =

* Bug fixes
* Compatibility with WP 6.4

= 1.5.0 =

* Bug fixes
* Code Optimizations
* Compatibility with WP 6.2

= 1.4.6 =

Updated feedback form

= 1.4.5 =

Fixed issues

= 1.4.4 =

Changed support and feedback email.

= 1.4.3 =

Added end of the year sale banner and changed pricing.

= 1.4.2 =

Added language translation support 

= 1.4.1 =

Compatibility with WordPress 6.1

= 1.4 =

Password policy UI changed

= 1.3.4 =

Password policy fixes and UI change and added feedback form

= 1.3.3 =

Password policy fixes and UI change

= 1.3.2 =

Password policy fixes

= 1.3.1 =

Password policy compatibility test with 6.0

= 1.2.3 =

Password policy with UI improvements, documents, and videos added

= 1.2.2 =

Password policy manager with First Time Login Password Change and bug fixes


= 1.2.1 =

Password policy with the new UI, bug fixes, and code improvement

= 1.1.4 =

Password policy with the new reset password window and some bug fixes

= 1.1.3 =

Password policy with the bug fixes and code improvement

= 1.1.2 =

Password policy with the new user interface and code improvement

= 1.1.1 =

password policy with the Bug fixes and code improvement

= 1.1.0 =

Password policy with the New UI,1 Click Reset password, Password Score, Password Report. 

= 1.0.3 =

Bug fixes Password Policy Manager: Strong password policy on WP reset link, UI improvement. Code improvement.

= 1.0.2 =

Password policy manager with the basic functionality adding and bug fixes.

= 1.0.1 =

Password policy manager with the basic password management system adding feedback form and bug fixes.

= 1.0.0 =

Password policy manager to force users to password change, strong passwords to maintain high security of the website.

==  Upgrade Notice  ==

= 2.0.0 =

* Bug fixes
* Compatibility with WP 6.4

= 1.5.0 =

* Bug fixes
* Code Optimizations



