The goal of this plugin is to shore up WordPress using security practice recommendations.
At this time, the plugin improves WordPress authentication by doing the following.
Whenever someone logs into WordPress site, it'll verify their password using Have I been pwned.
If their password appeared in data breach, the plugin will prevent them from logging in until they reset their password..
For people that have role where there's no enforcement, the plugin will show warning when they log in with compromised password..
Someone will never be able to reset or change their password to one that's appeared in security breach..
The plugin also encrypts passwords using the stronger bcrypt hashing function.
The plugin will take care of converting it the time that you log in after installing the plugin.
password hashing function makes decrypting the passwords from the data breach harder to do.
This combined with the enforcement of uncompromised passwords will help ensure that those passwords are never decrypted ...
Read more
Related items:
