Expire User Passwords
by Matt Miller 4.2 (5 reviews)

Expire User Passwords

Require certain users to change their passwords on a regular basis.

Expire User Passwords ranks #3,912 among WordPress.org plugins with 3,000+ active installations, is #133 of 1,583 in the Authentication category, a 4.2/5 rating from 5 reviews, and was last updated Feb 17, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 6.9.7 (Current: 7.1)
v1.4.2 Current Version v1.4.2
Updated 7 months ago Last Update on 17 Feb, 2026
Refreshed 6 hours ago Last Refreshed on
#133 of 1,583 in Authentication Top 5% by installs Downloads -29% this week
View on WordPress.org
Rank
#3,912
+1 this week
Active Installs
3K+
-23%
KW Avg Position
57.3
0.7 better
Downloads
61.3K
+9 today
Support Resolved
0%
No change
Rating
84%
Review 4.2 out of 5
4.2 (5 reviews)

Next Milestone 4K

Total Progress 89.2%
3K+ 4K+
265
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 108 more installs to reach 4K+

Rank Changes

3,715 3,814 3,913 4,012 4,111 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026
3,715 3,815 3,915 4,015 4,115 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026
Current #3,912
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 10 20 30 40 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026
0 10 20 30 40 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.2
5 reviews
Overall 84%
5
3 (60%)
4
1 (20%)
3
0 (0%)
2
1 (20%)
1
0 (0%)

Security History

Source: WPVulnerability

No known vulnerabilities on record for Expire User Passwords. Checked 1 month ago.

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site administrators who need certain user roles to change their passwords periodically, such as sites with government, banking, or healthcare compliance requirements. It solves the problem of stale, long-unchanged passwords by enforcing a configurable maximum password age and forcing resets for selected user roles.

  • Configurable maximum password age
  • Set password expiry in days
  • Role-based password expiration
  • Excludes roles from expiration
  • Non-Administrator default targeting
  • Multilingual support

Frequently Asked Questions

Common questions about Expire User Passwords

Existing users are not immediately expired. The plugin tracks each user's last password reset date. Users who have never reset their password have no recorded date, so they are treated as not expired. The expiration clock only starts once a user registers or resets their password after the plugin is active.
The plugin provides a eup_submenu_access filter to control which capability is required to see the settings page. By default it requires manage_options. To restrict it to only administrators, add this to your theme's functions.php: add_filter( 'eup_submenu_access', function() { return 'manage_network'; } ); Or use any capability that only your desired role has. This is useful when custom roles have manage_options for other purposes but should not access the Expire User Passwords settings.
The default is 90 days. You can change this in Settings > Expire Passwords to any value between 1 and 365 days.
By default, all non-Administrator roles are required to reset their passwords. You can customize which roles are affected in the plugin settings.
No. When a user's password expires and they are prompted to reset it, they cannot use the same password they had before.
The plugin requires PHP 8.1 or higher and has been tested up to WordPress 6.9.1. It requires WordPress 4.0 at minimum.
The plugin is available in 50 languages!

Sign In / Register

You need to sign in or register to use this feature.