by
iTRON
5 (1 reviews)
Safety Passwords
Require stronger passwords and prevent password reuse.
Safety Passwords ranks #69,390 among WordPress.org plugins with 0+ active installations, a 5/5 rating from 1 reviews, and was last updated Oct 1, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1.4
v1.5
Current Version v1.5
Updated 1 month ago
Last Update on 01 Oct, 2026
Refreshed 1 week ago
Last Refreshed on
Rank
#69,390
—
No change
Active Installs
0+
-100%
KW Avg Position
82.8
1 worse
Downloads
2.7K
+3 today
Support Resolved
0%
—
No change
Rating
100%
Review 5 out of 5
5
(1 reviews)
Next Milestone 10
0+
10+
41,822
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 10 more installs to reach 10+
Rank Changes
Current
#69,390
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
5.0
1 reviews
Overall
100%
5
1
(100%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.5
- Last Updated
- Oct 01, 2026
- Requires WP
- 5.0+
- Tested Up To
- 7.1.4
- PHP Version
- 7.4 or higher
- Author
- iTRON
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 5
- Reviews
- 1
- Support Threads
- 0
- Resolved
- 0%
Keywords
enforce secure passwords
force secure passwords
secure password validation
secure passwords
user passwords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade Now
Frequently Asked Questions
Common questions about Safety Passwords
The periodic check starts a required reset and attempts one recovery email. Later checks keep the reset pending, even if that email fails; they do not retry the email. A successful reset or profile password change clears the pending state and renews the period. Before expiry, the profile shows a countdown and the admin bar shows a reminder in the final seven days. After expiry, they ask for a password change without a countdown; if a reset is already pending, they point to the recovery form. An interval of 0 disables periodic resets and these reminders.
Settings apply to the current network. Only network administrators with manage_network_options can change them. On a single-network installation, periodic and manual checks include every account, even one without site membership. On a multi-network installation, each network checks accounts with membership on at least one of its sites, including inactive sites. It excludes accounts assigned only to another network or to no site. Passwords and password history belong to the WordPress account globally, so a reset of an account shared by networks affects it everywhere. The plugin keeps one periodic event on each network's main site. When scheduling or deactivating, it removes older events on that network's subsites. Administrator roles on existing and new sites retain the plugin's settings capability. MU setup runs in each network's own context; loading one network does not initialize all networks.
Normally, no manual action is needed. The first eligible request records current password history, grants administrator capabilities, and schedules checks. A changed plugin version triggers automatic setup on the next eligible request, including after file, Composer, or CI deployment, if the new code loads against the target database. Failed setup retries with bounded delays. Eligible requests also repair missing or duplicate periodic events. A code change that requires a fresh full initialization must advance the plugin version marker. The settings page shows its diagnostic panel only while setup is pending, running, or failed, or the schedule is degraded. A ready installation with a healthy schedule or routine automatic verification due shows no panel. Use Initialize / repair after an error or degraded schedule to retry now. It repairs capabilities, current password history, and the schedule for the current network without rotating passwords. It is also needed after restoring a same-version MU installation to include accounts added during its absence. It cannot reconstruct password changes made while the plugin was absent. If repair fails, resolve the cause and retry; automatic retries remain available. The button requires a POST request, nonce, and manage_options or the plugin management capability on a single site, or manage_network_options on multisite. wp safety init --url=<main-site-url> performs the same repair or gives a checked result before opening traffic. It needs a working WordPress bootstrap and database, and exits with an error if setup cannot finish, including while another process holds the initialization lock. For multiple networks, use each network's main-site URL separately.
Periodic resets use WP-Cron. WordPress requests or an external cron trigger are needed for them to run on time. Automatic setup and schedule repair also require the plugin to load; they cannot run while the site is idle. Standard plugin deactivation removes the periodic schedule and invalidates setup state for later activation.
Remove the MU loader and deactivate any separately active standard copy. Removing the loader does not run deactivation, so manually remove the safety_passwords_periodically_reset event from the network's main site and any legacy subsites. Saved settings and password history remain. If the same-version loader returns, its retained setup marker does not trigger a full history pass. Run Initialize / repair or wp safety init --url=<main-site-url> to include current passwords for accounts added during the gap. Password changes made while the code was absent cannot be reconstructed.
With the plugin loaded, wp user update with a password and wp user reset-password complete any pending reset, renew the period, and record the saved password in history. These administrative changes bypass password strength and reuse checks; WP-CLI warns on stderr when a password is changed. Later changes through web forms still check password history. Changes made with the plugin skipped cannot update its history or reset state, and WP-CLI changes made before version 1.5 are not repaired automatically.
The plugin integrates with Stream. Current password reset logs use fixed failure categories and aggregate periodic reset and reminder counts, without account identifiers or WordPress error details. wp safety check-users likewise logs only aggregate counts and reports Success: Done. Older Stream records may contain details from previous versions. Site operators should review those records privately under their retention policy; updating the plugin does not remove them.
Background reset emails and silent reset links also work on WordPress 5.0 through 5.6, where the login-page recovery function is unavailable during periodic checks.
The release package includes runtime dependencies. If installing from a source checkout instead, run composer install --no-dev --no-scripts in plugin-dir/ before WordPress loads the plugin.