A couple of clever WordPress plugins designed to protect your passwords

Apr 15, 2013 19:11 GMT  ·  By

In light of the recent brute-force attacks against WordPress and Joomla websites, experts have once again reiterated the importance of password security.

In this “security app of the week” post, I’m going to recommend a couple of WordPress plugins that can help WordPress admins keep their passwords secure.

The first application is Expire Password, which is designed to force users to change their passphrases once in a while. The app keeps track of a password’s age and after a certain time interval has passed, it forces admins to change them.

Expire Password also allows administrators to manually trigger a password change in case they believe their accounts have been compromised.

The second application is Password Protection. The plugin utilizes a secondary authentication system that prevents bots from accessing the WordPress backend.

The app also checks to see if the user is accessing the login page directly or by pressing the “login” button from the website. If a valid redirection header from the site’s frontend is not detected, the authentication is blocked because the attempt is likely made by a bot.

Expire Password is available for download here

Password Protection is available for download here

Password Protection and Expire Password (4 Images)

Password protection
Expire Password for WordPressExpire Password for WordPress
+1more