Require users to change their password on first login.
As of April 2026, Force Password Change is a WordPress user plugin with 500 active installations and a 4/5 rating from 4 reviews. It has been downloaded 14K+ times in total. Requires WordPress 3.2+ and PHP false+. Available on WordPress.org since 2012. Last updated 5 years ago — may have compatibility concerns. Top alternative: User Role Editor.
This plugin redirects newly-registered users to the Admin -> Edit Profile page when they first log in. Until they have changed their password, they will not be able to access either the front-end or other admin pages. An admin notice is also displayed informing them that they must change their password.
New administrators must also change their password, but as a safety measure they can also access the Admin -> Plugins page.
| WordPress | 3.2+ requiredTested up to 5.5.18 |
| PHP | false+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.