NIST-aligned password policy with HIBP breach checking, layered failed-login lockout, and an audit log.
Alternatives to VA Check Old Password
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security.
Define and enforce password policies for your WordPress site with length, complexity, and expiration rules.
Easily enforce password reset for WordPress users. Choose to force password changes site-wide, by user and/or by role, to boost your site's security.
Password-policyv1.1.0
A plugin wordpress for enhance the password policy.
Password protect wp-login.php with HTTP Basic Authentication. Stops bots and brute force attacks at the server, before WordPress even loads.
See every application password, active session and user account that can reach your site, with unused and stale access flagged.
Read-only security audit for WordPress: 62 checks including PHP2Shell, an A to F grade, and a checklist that records what you have fixed.
Salt Shakerv2.1.2
Salt Shaker enhances WordPress security by changing WordPress security keys and salts manually and automatically.
Adds reCAPTCHA verification to WooCommerce checkout, login, registration, and password reset forms to prevent spam and bot transactions.