How to Enforce Strong Passwords (Complex Passwords) for WordPress Users

Although WordPress will display the strength of the password when the user sets the password, it does not force the user to use a complex password. If users in the admin or edit roles use weak (simple) passwords, then your site is at risk. In this article, we will show you how to enforce strong passwords, i.e. complex passwords, for WordPress users.

We will use the Force Strong Passwords plugin, which copies the WordPress password strength check JS script in PHP and forces users with execute permissions to use strong passwords.

So basically any user with permission to publish articles, upload files, or edit published articles must use a strong password. That is to say, except for the two roles of contributor and subscriber, users in other roles must use strong passwords.

Now you just need to install and enable the plugin, and the plugin will do the rest.

So, are your passwords strong?