Require certain users to change their passwords on a regular basis.
As of April 2026, Expire User Passwords is a WordPress login plugin with 3.0K+ active installations and a 4.2/5 rating from 5 reviews. It has been downloaded 58K+ times in total. Requires WordPress 4.0+ and PHP 8.1+. Available on WordPress.org since 2019. Recently updated within the last 3 months. Downloads are up 45% this week. Top alternative: WPS Hide Login.
Note: This is a forked version of the now unsupported Expire Passwords plugin. The notes below are copied over from the original plugin and will be updated as relevant updates become available. Please help by contributing to the GitHub repository Expire Passwords on GitHub
Did you find this plugin helpful? Please consider leaving a 5-star review.
Harden the security of your site by preventing unauthorized access to stale user accounts.
This plugin is also ideal for sites needing to meet certain industry security compliances – such as government, banking or healthcare.
In the plugin settings you can set the maximum number of days users are allowed to use the same password (90 days by default), as well as which user roles will be required to reset their passwords regularly (non-Admini…
Excellent plugin.
Unfortunately, after the new WordPress update, it blocks managed users from logging in.
Everything in the title
Excellent plugin, solved my problem.
Does what it says 🙂
Using it on 15 WP 5.3.2 sites at the moment. It’s a must have these days. Using the same password too long will lead to leaks at some time.
Would like to have an export/import option to easily share settings.
Also a way to configure via the wp cli would be nice.
| WordPress | 4.0+ requiredTested up to 6.9.4 |
| PHP | 8.1+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.