iThemes Security (formerly Better WP Security)
[Plugin: Better WP Security] Enforce strong passwords doesn't work thru login page (1 post)

  1. saintandrews
    Posted 4 years ago #

    The BWPS system tweak to enforce strong passwords for given user levels does work when a user changes his password through his profile page, but if he picks the Lost your password? link on the login page and changes it there, any password is accepted, no matter how weak.

    This hole renders the enforce strong passwords system tweak pointless.


Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic