Check WordPress user passwords against passwords previously appeared in data breaches.
- Uses Pwnd Passwords API range search to check the passwords
- Validates passwords on WordPress password reset form
- Validates passwords on WordPress user edit page
Even though WordPress offers password strength meter, many users might skip it and use their own passwords. This plugin at least prevents users from using passwords that are already appeared in some data breach. Bots bruteforcing WordPress logins use password lists that contain these passwords, so this plugin helps with users security.
