Password Reset Enforcement

This plugin allows you to force users of your WordPress website to reset their passwords. This is useful if you want to enforce a password retention, or in case of a user data breach. Password reset can be enforced for all users at once (note: account of the user who initiate the action will always be excluded from the processing), or: for all users in a given role, and/or specific users (chosen by their user login or display name). https://www.youtube.com/watch?v=OIEdGAIi610 This plugin can be enabled on a single site, or WordPress multisite (network) installation - in the latter case, you can only enforce all users at once (filtering per role and per user is not available). Available options

• Decide whether or not users should receive an email with the password reset link.
• Decide whether or not users should be allowed to initiate the password reset process using their current passwords. If checked (enabled), users will be able to log in (using their current passwords) and will be redirected to the "set new password" form immediately after successful login and logged-out (so that the only action they can take is to set the new password). If unchecked (disabled), users will not be able to log in using their current password - they will be logged out immediately, and redirected to the "reset password" form, where they will have to provide their user name or email, and initiate the "full" password reset process.
• Decide when should the password be reset. Choose "After current session expiry" to force users to reset their passwords after their current session expires. Choose "Immediately" to force logout of chosen users.

This plugin is optimized to work on a sites with large number of users (enterprise-scale). Other security plugins of ours Check the Password Policy & Complexity Requirements WordPress plugin to enforce secure password policy for your users and define healthy password retention.

== Changelog == 1.9.0 (2024-12-13)

• Dependencies updated
• Code improvements

1.8.0 (2024-11-08)

• Custom capabilities for managing the plugin settings implemented
• Compatibility with WordPress 6.7 confirmed
• Dependencies updated
• Code improvements

1.7.2 (2024-10-25)

• JS dependency map and tree-shaking optimized

1.7.1 (2024-10-23)

• Add missing Cache utility class

1.7.0 (2024-10-17)

• Language mapping file added for easier generation of JSON translation files
• Language files updated for Polish translation
• Add caching to user roles getter function, along with proper cache invalidation, to improve the plugin's performance
• Dependencies updated
• Code improvements

1.6.0 (2024-08-30)

• Required WordPress core version bumped to 6.6 to use the new React JSX runtime package
• Compatibility with older version of PHP (7.4) implemented
• Plugin container implementation improved
• Plugin settings page implementation improved
• Dependencies updated
• Code improvements

1.5.0 (2024-07-11)

• Settings page redesigned
• Dependencies updated
• Code improvements

1.4.0 (2024-05-24)

• Dependencies updated
• Code improvements
• Basic onboarding process implemented

1.3.0 (2024-04-26)

• Dependencies updated
• Code improvements

1.2.0 (2024-03-26)

• Plugin container implemented (For older records, see the changelog.txt file).