Teydea Login Security – Password Policy, Complexity Rules & Expiration
Teydea Login Security lets you define and enforce password policies for all users on your WordPress site. Set rules for password length, complexity (uppercase, lowercase, digits, special characters), restricted characters, password expiration, and more. The plugin validates passwords on login, regis
About this tool.
Teydea Login Security lets you define and enforce password policies for all users on your WordPress site.
Set rules for password length, complexity (uppercase, lowercase, digits, special characters), restricted characters, password expiration, and more. The plugin validates passwords on login, registration, password changes, and during active sessions — automatically redirecting users to reset non-compliant passwords.
Key benefits:
- Enforce password length and complexity rules from a single settings page.
- Set password expiration to ensure users update their passwords regularly.
- Require users to confirm their current password before making changes.
- Compatible with WordPress multisite networks.
Whether you manage a personal blog, a membership site, or a multisite network, Teydea Login Security helps you maintain consistent password standards across all user accounts.
Learn more at teydeastudio.com/plugins/login-security .
Why password policies matter
Weak passwords remain one of the most common entry points for unauthorized access to WordPress sites. Teydea Login Security lets you enforce the password-policy controls that many security and compliance programs call for — minimum length, character composition, expiration, restricted characters, and more — across every user account. It helps you apply these controls, but does not by itself make your site compliant with any particular standard.
Features
Free Features
- Minimum password length — Set and enforce the minimum number of characters for user passwords.
- Maximum password length — Cap the number of characters a password may contain, keeping passwords within a length your site and any systems you integrate with accept.
- Password complexity rules — Require a mix of uppercase letters, lowercase letters, digits, special characters, and a minimum number of unique characters.
- Consecutive username symbols — Restrict how many consecutive characters from the user’s username or display name can appear in the password. Matching ignores letter case.
- Restricted characters — Block specific characters from being used in passwords.
- Restricted words and phrases — Maintain a site-wide list of words and phrases (one per line) that passwords cannot contain. Case-insensitive substring matching catches site-specific tokens such as your brand name, product names, your city, or a year token (for example: acme , summer , 2026 ).