Teydea Password Reset – Force Password Reset & Expiration
Settings page: force a password reset for all users, choose whether to email the reset link, whether the current password may be used to start the reset, and when the reset takes effect.
Enhance your WordPress website’s security by forcing users to reset their passwords.
Teydea Password Reset is a simple yet powerful security plugin that allows site administrators to require users to update their passwords—ideal after a potential data breach, routine security checks, or during onboarding/offboarding processes.
Features
- Force password reset for all users, specific user roles, or individual users.
- Optional email notification to users with a direct reset link.
- Flexible login behavior:
- Allow login before resetting: users log in with the old password, are immediately prompted to set a new one.
- Block login until reset: users must reset their password before accessing the dashboard.
- Choose reset timing:
- Immediately: forces logout and password reset on next login.
- After session expiry: users are asked to reset after their current session ends.
- WP-CLI support for command-line password management and automation.
- Multisite compatible (network-wide reset only).
- Optimized for performance on large-scale and enterprise WordPress installations.
Use Cases
- Responding to a security breach or suspected compromise.
- Enforcing routine password changes in corporate environments.
- Applying onboarding/offboarding security policies for teams or membership sites.
Compatibility
- Works on both single-site and multisite (network) WordPress setups.
- Supports PHP 7.4+ and WordPress 6.8 through 7.1.
- Compatible with modern WordPress admin experience.
WP-CLI Commands
This plugin provides WP-CLI commands for automated password reset management:
Force Password Reset
wp password-reset-enforcement force [–to_all] [–to_roles=] [–to_users=] [–applicability=] [–with_email] [–with_current_password_allowed] [–limit=] [–paged=]
Clear Password Reset Enforcement
wp password-reset-enforcement clear [–to_all] [–to_roles=] [–to_users=] [–limit=] [–paged=]
List Users with Enforced Password Reset
wp password-reset-enforcement list [–limit=] [–paged=]
Check Password Reset Status
wp password-reset-enforcement status [–to_all] [–to_roles=] [–to_users=] [–limit=] [–paged=]
Command Options
--to_all: Target all users on the site--to_roles=<roles>: Comma-separated list of user roles (e.g., editor,administrator)--to_users=<user_ids>: Comma-separated list of specific user IDs (e.g., 1,5,10)--applicability=<when>: When reset takes effect (immediately, after_session_expiry)--with_email: Send email notifications to affected users (default: true)--with_current_password_allowed: Allow users to reuse current password (default: false)--limit=<number>: Maximum users to process in single operation--paged=<page>: Page number for pagination
Command Examples
wp password-reset-enforcement force --to_all
wp password-reset-enforcement force --to_roles=editor,administrator --applicability=after_session_expiry
wp password-reset-enforcement clear --to_users=1,5,10
wp password-reset-enforcement list --limit=50 --paged=2
wp password-reset-enforcement status --to_all --limit=50 --paged=2<h3>Related Plugins</h3>
Want to go beyond forced password resets? Check our Teydea Login Security plugin to enforce strong password rules, block weak passwords, and set automatic expiry policies. The free version is available on WordPress.org.