• Resolved jeffersonpowers

    (@jeffersonpowers)


    Does the “enforce strong passwords” feature include not allowing users to re-use their previous password? If so, how far back (i.e. last 4 passwords, last 3, etc.)?

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @jeffersonpowers,

    I have suggested the possibility of this from one previous customer request. We can’t guarantee that all customer suggestions will be added to the final product – but they are all discussed, so I will raise the fact it’s been mentioned again.

    Whilst WordPress itself can check password strength on creation and Wordfence can enforce it, we also have optional checks for identifying particularly weak passwords, or ones already found in breaches. 2FA is probably the best protection to mitigate issues where the password has been reused from an earlier time or has been used for an account on another site.

    Many thanks,
    Peter.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.