Force Password Reset & Expiry Policy
Forces selected users to reset their password before they can continue using the site. Ideal for temporary passwords and security compliance.
Built to the highest WordPress standard
Clean, audited code that installs in a click, stays out of your way, and keeps getting better — backed by the team that built it.
Everything you need, done properly
The capabilities that matter, built in from day one.
Maximum password age
in days, with 0 meaning expiry is switched off (the default).
- Per-role targeting
- Administrators are never expired
Per-role targeting
apply the policy to every non-administrator, or only to the roles you pick.
- Maximum password age
- Administrators are never expired
Administrators are never expired
, so an unattended nightly job can never lock out the only account able to switch it off again.
- Maximum password age
- Per-role targeting
Thoughtful details throughout
One-click setup
Install, activate and configure in minutes — no code required.
Lifetime updates
New features and compatibility updates, included with your license.
Priority support
Real help from the team that built it, whenever you need it.
Translation-ready
Fully localizable and compatible with the latest WordPress & PHP.
Developer-friendly
Clean hooks and filters so you can extend it to fit your workflow.
Standards-compliant
Follows WordPress best practices and works with any well-coded theme.
Simple, transparent pricing
Choose the license that fits — every plan includes updates and support.
- 1 site license
- All features included
- 1 year of updates & support
- 30-day money-back guarantee
- Up to 5 site licenses
- All features, on every site
- 1 year of updates & priority support
- 30-day money-back guarantee
- Unlimited site licenses
- All features, everywhere
- 1 year of updates & priority support
- 30-day money-back guarantee
Frequently asked questions
Can I force a reset for all users at once?
Yes. From the Force Password Reset admin page you can force a reset for every non-administrator user with a single action, or clear the requirement just as easily.
Are administrators affected?
Administrators are protected from being forced to reset by other admins to avoid lock-outs. You can still reset your own password normally. The expiry policy applies the same protection, and goes a little further: users with the administrator role, any user who can manage options, and multisite super admins are never expired by the scheduled sweep. An unattended nightly job is the wrong place to l
How do I turn on password expiry?
Go to **Settings → Password Reset → Password Expiry Policy** and set **Password Maximum Age** to the number of days you want. Leave it at 0 and nothing about the plugin's behaviour changes.
What happens to users who already existed when I turn expiry on?
Nobody is locked out on day one. Existing accounts have no recorded password-change date, so the plugin records the moment the expiry clock started (shown on the settings screen) and treats that as their last change. Every existing user therefore gets the full maximum age of grace from that point, and the warning email still reaches them beforehand. The assumed date is written to each user the fir
Will the expiry sweep time out on a site with a lot of users?
No. The sweep is batched: each run examines a bounded number of users and, if there are more, records where it got to and books a follow-up run a few minutes later, until the whole user list has been covered. The batch size and the number of batches per run are filterable (fpr_expiry_batch_size, fpr_expiry_batches_per_run).
Ready to get started?
Get Force Password Reset & Expiry Policy today and set it up in minutes — backed by a 30-day money-back guarantee.
Get it now