內容簡介
- 這個外掛可以強制使用者重設他們在WordPress網站上的密碼。這在你想要強制保留密碼或在使用者數據遭到侵犯的情況下非常有用。
- 可以一次為所有使用者強制重設密碼（注意：發起行動的使用者帳號將始終被排除在處理之外）；或者可以選擇特定角色的所有使用者和/或特定使用者（根據使用者登錄名稱或顯示名稱）。
- 這個外掛可以在單獨的網站或WordPress多站（網路）安裝上啟用 - 在後者情況下，只能一次強制所有使用者（無法進行按角色和按使用者篩選）。
- 可用的選項包括：
1. 決定使用者是否應該收到重設密碼連結的郵件。
2. 決定使用者是否被允許使用他們當前的密碼啟動重設密碼流程。如果勾選（啟用），使用者將能夠使用當前的密碼登錄，並在成功登錄和登出後立即重定向到「設定新密碼」表單（這樣他們唯一可以採取的操作就是設定新密碼）。如果未勾選（停用），使用者將無法使用當前密碼登錄 - 他們將立即被登出並重定向到「重設密碼」表單，其中他們必須提供使用者名稱或電子郵件並啟動「完整」重設密碼流程。
3. 決定何時應該重設密碼。選擇「在當前會話到期後」強制使用者在當前會話到期後重設密碼。選擇「立即」強制選定使用者登出。
- 這個外掛經過優化，可以在使用者數量較多的網站上運作。
外掛標籤
開發者團隊
📦 歷史版本下載
原文外掛簡介
Enhance your WordPress website’s security by forcing users to reset their passwords.
Password Reset Enforcement is a simple yet powerful security plugin that allows site administrators to require users to update their passwords—ideal after a potential data breach, routine security checks, or during onboarding/offboarding processes.
Features
Force password reset for all users, specific user roles, or individual users.
Optional email notification to users with a direct reset link.
Flexible login behavior:
Allow login before resetting: users log in with the old password, are immediately prompted to set a new one.
Block login until reset: users must reset their password before accessing the dashboard.
Choose reset timing:
Immediately: forces logout and password reset on next login.
After session expiry: users are asked to reset after their current session ends.
WP-CLI support for command-line password management and automation.
Multisite compatible (network-wide reset only).
Optimized for performance on large-scale and enterprise WordPress installations.
Use Cases
Responding to a security breach or suspected compromise.
Enforcing routine password changes in corporate environments.
Applying onboarding/offboarding security policies for teams or membership sites.
Compatibility
Works on both single-site and multisite (network) WordPress setups.
Supports PHP 7.4+ and WordPress 6.6 through 6.8.
Compatible with modern WordPress admin experience.
WP-CLI Commands
This plugin provides WP-CLI commands for automated password reset management:
Force Password Reset
wp password-reset-enforcement force [–to_all] [–to_roles=] [–to_users=] [–applicability=] [–with_email] [–with_current_password_allowed] [–limit=] [–paged=]
Clear Password Reset Enforcement
wp password-reset-enforcement clear [–to_all] [–to_roles=] [–to_users=] [–limit=] [–paged=]
List Users with Enforced Password Reset
wp password-reset-enforcement list [–limit=] [–paged=]
Check Password Reset Status
wp password-reset-enforcement status [–to_all] [–to_roles=] [–to_users=] [–limit=] [–paged=]
Command Options
--to_all: Target all users on the site
--to_roles=
--to_users=
--applicability=
--with_email: Send email notifications to affected users (default: true)
--with_current_password_allowed: Allow users to reuse current password (default: false)
--limit=
--paged=
Command Examples
wp password-reset-enforcement force --to_all
wp password-reset-enforcement force --to_roles=editor,administrator --applicability=after_session_expiry
wp password-reset-enforcement clear --to_users=1,5,10
wp password-reset-enforcement list --limit=50 --paged=2
wp password-reset-enforcement status --to_all --limit=50 --paged=2
Related Plugins
Want to go beyond forced password resets? Check our WP Password Policy plugin to enforce strong password rules, block weak passwords, and set automatic expiry policies — so you’ll never need to force a password reset again. [https://wordpress.org/plugins/password-requirements/](Free version available on WordPress.org).
