https://github.com/riklewis/better-passwords

Stop use of a bad passwords, including those in the Have I Been Pwned breached password database
https://github.com/riklewis/better-passwords

pwned-passwords security wordpress wordpress-plugin

Last synced: about 2 months ago
JSON representation

Stop use of a bad passwords, including those in the Have I Been Pwned breached password database

• Host: GitHub
• URL: https://github.com/riklewis/better-passwords
• Owner: riklewis
• License: gpl-3.0
• Created: 2019-01-25T22:23:31.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2022-03-21T13:54:30.000Z (over 4 years ago)
• Last Synced: 2025-01-13T06:08:54.936Z (over 1 year ago)
• Topics: pwned-passwords, security, wordpress, wordpress-plugin
• Language: PHP
• Homepage: https://bettersecurity.co
• Size: 296 KB
• Stars: 2
• Watchers: 2
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

README

          
# Better Passwords

This is a Wordpress plugin that stops the use of a bad passwords, including those in the [Have I Been Pwned?](https://haveibeenpwned.com) breached password database.

This plugin sets a default minimum password length of 10 characters, to ensure that passwords are suitably long that they are hard to guess.  However, it does not insist on any complexity rules, such as digits and special characters, as length is the most important thing when making a password hard to guess.

This plugin uses Troy Hunt's [Pwned Passwords API](https://haveibeenpwned.com/Passwords) in order to check a user's potential password against a corpus of breached passwords.

The password itself is never sent to any third party, only a partial hash is sent. This means that the password entered will always be private.

As an added bonus, this plugin also upgrades the hashing algorithm used when storing your password in the database. This is a secure one-way hash created using the [Bcrypt](https://en.wikipedia.org/wiki/Bcrypt) or [Argon2](https://en.wikipedia.org/wiki/Argon2) algorithm.