jukkarau/wp-pwnd-passwords

Check passwords against known pwnd passwords

Maintainers

Package info

github.com/jukra/wp-pwnd-passwords

Type:wordpress-plugin

pkg:composer/jukkarau/wp-pwnd-passwords

Statistics

Installs: 6

Dependents: 0

Suggesters: 0

Stars: 2

Open Issues: 0

Security

Advisories: 0

Aikido package health analysis

dev-master 2018-03-08 09:50 UTC

Requires

  • php: >=5.3.0

Requires (Dev)

GPL-3.0-or-later 10a37e6ef1a7f77ac477c92f78f8f4cbfd2da059

This package is not auto-updated.

Last update: 2026-03-21 02:39:09 UTC

README

Check WordPress user passwords against passwords previously appeared in data breaches.

Features

  • Uses Pwnd Passwords API range search to check the passwords
  • Validates passwords on WordPress password reset form
  • Validates passwords on WordPress user edit page

Why?

Even though WordPress offers password strength meter, many users might skip it and use their own passwords. This plugin at least prevents users from using passwords that are already appeared in some data breach. Bots bruteforcing WordPress logins use password lists that contain these passwords, so this plugin helps with users security.

Screenshots

Using bad password result

Pwnd password