Enforce Strong Passwords in WordPress

Try reviewing https://wpeverest.com/blog/enable-strong-password-in-wordpress-registration-forms/

https://core.trac.www.ads-software.com/ticket/35817

Here is a customisable plugin-free option, although you will need to be using a child theme to add the code: https://wp-tutorials.tech/optimise-wordpress/enforce-strong-passwords-without-a-plugin/

Hi,
thanks for the answer
@t-p : the plugin you’re suggesting is not free but thanks anyway
@pidengmor : even if i’m not very confortable with the idea to write a bit of code, this looks like a good solution. i’ll think about it, thanks

What do you think about this plugin ( https://fr.www.ads-software.com/plugins/no-weak-passwords/) that “forbids any user to choose any password from the ? common passwords list ? obtained from https://www.openwall.com/passwords/wordlists/ ?
This doesn’t look like something very strong to me…. :/ . Do you have an opinion about that?
Thanks

What do you think about this plugin ( https://fr.www.ads-software.com/plugins/no-weak-passwords/) that “forbids any user to choose any password from the ? common passwords list ? obtained from https://www.openwall.com/passwords/wordlists/ ?
This doesn’t look like something very strong to me…. :/ . Do you have an opinion about that?

There could still be weak passwords that do not feature on that block list of common passwords used.

Passwords are cracked by bots scrolling through lists and variations of passwords. How about using a plugin to limit the number of login attempts before a user is locked out (e.g. after 4 failed login attempts the user is locked out): https://www.ads-software.com/plugins/limit-login-attempts-reloaded/

Hi
@pidengmor , thanks for the suggestion. I’m already using a plugin that limits the number of login attempts and locks out the user after 3 failed attempts. I didn’t feel that this was enough but i might reconsider it