Password Policy Manager vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Features | Setup Guide | Documentation Enforce Strong and Secure Password Policies with Password Policy Manager The miniOrange Password Policy Manager plugin helps you enforce strong and secure password policies with features like password reset, password expiry, password score, and strong password rules. You can manage user passwords efficiently using the user password manager, password strength meter, and history manager to enhance overall password security. In case of a breach, take quick action with one-click password reset, lock inactive users, and enforce random password rules. This ensures complete protection by securing passwords, and managing both active and lock inactive users to prevent password-based attacks. Have questions? Reach us at [email protected] What is the Password Policy Manager Plugin for WordPress? WordPress plugin for password expiry, strength check, and secure policy enforcement. Easy to install and configure, this Password Security plugin secures your site without disrupting the user experience. WordPress PPM Key Features (Free Version) Enforce strong passwords: Force all users to create strong passwords according to the password policy set by the admin for high Password Security. Users password manager: User password manager allows the admin to manage the users’ passwords (like password strength, how many passwords are strong, etc) to check the Password Security. [password policy setup guide] Enforce password change: Administrators can force users to change their password on their next login using this functionality use to enforce strong passwords on their users and ensure strong Password Security. One click reset password: This feature allows the admin to invalidate the current password and force their users to generate a new strong password. This can be done for all users in case of any breach. This will kill all the current sessions and users will be forced to set a new strong password via email hence reinforcing the Password Security. Password Score: It will show all the users’ password strengths. You can check whether the passwords being used are strong, medium or weak. Based on that you can use the enforce strong passwords feature to improve Password Security. Auto Password Expiry: This feature allows the admin to enforce a custom time-based password expiry to improve Password Security. Once the password has expired, the users will be forced to create a new password. Password strength: The admin can set the minimum and maximum length of the password. You can also add constraints that you want your users to follow while setting a strong password. Unlimited Users: There is no user limit on the password policy manager plugin and it can be used to create password policies for unlimited users. Which Key Features does Password Policy Manager support in the Enterprise Plan? Role-Based Enforce Strong Password on First Login: Force specific users roles to create strong passwords according to the password policy set by the admin on their first login. User-Based One-click password Reset and Logout: Admin can reset passwords of users at once and terminate their logged-in sessions with just one click in case of any suspicious activity using the One-click reset password. Admin can then send password reset links over email. Custom Redirect URL: The admin can redirect their users to a different custom URL using this functionality. Active & Inactive Users Activity Log: The admin can track the activity of all active as well as lock inactive users using this tool of the Password Policy Enterprise plan. Logout Inactive Users: When this setting is enabled, a user is logged out and their session is destroyed if they are inactive for more than the customizable set time limit. Multisite: The Password Policy Manager Enterprise plugin is multisite compatible and can be used to create password policies for an entire multisite network. For any customization-related queries, reach us at [email protected] or call us at +1 9786589387. Upgrade to miniOrange Password Policy Manager Premium Plan for Advanced Security The premium plan of miniOrange WordPress Password Policy Manager gives you complete control over how users can secure passwords, helping you enforce policies across all roles, customize the login experience, and secure even the most complex WordPress setups. With the premium Password Policy Manager plugin offers advanced password security features, including role-based and user-based password policies. It also supports custom login forms like WooCommerce, Elementor, Ultimate Member, and more. Premium Features List Role-Based and User-Based Password Policies: Admin can set different [role-based as well as user-based policies] and enforce password policy changes to ensure strong Password Security. User-Based Enforce Strong Password on First Login: Force a specific set of users to create strong passwords according to the password policy set by the admin on their first login to maintain strong Password Security. Role-Based Enforce Password Change: Administrators can enforce specific sets of roles to change their passwords on their next login using this configuration to enhance Password Security. Role-Based One-click password Reset and Logout: Using [one-click reset password]) feature, the admin can reset passwords of all users / particular roles at once and terminate all logged-in sessions with just one click in case of any suspicious activity. Admin can then send the password reset link over email. Generate Random Passwords: Generate random passwords generates a random strong password containing all variations to make the password security strong and secure against brute force attacks. Automatically Lock Inactive Users: It will lock the user automatically if the user is inactive for the custom-specified time period. This can be set for particular roles as well as users. Password History Manager: It will manage the history of all the recently used passwords for each user, so no user can reuse a previous password. Active Users Activity Log: The admin can track the activity of all Active Users using this setting of the Password Policy Premium plan. Custom Login Forms Supported: The Premium plan also supports the following custom login forms: WooCommerce, Ultimate Member, Elementor Pro, BBPress, Gravity Forms, Ninja Forms, Buddy Press, User Registration, User Pro, MemberPress, and many others. Single Site: The Password Policy Manager Premium plugin is single-site compatible and can be used to create password policies on only one site at a time. Why You Need to Register with miniOrange Some advanced features in the Password Policy Manager plugin, like one-click password reset and random password generation. Core functionalities such as enforcing strong password policies, password expiry, password history, and locking inactive users work without registration. Customized solutions and active support for the miniOrange Password Policy Manager plugin are available. Email us at [email protected] or call us at +1 9786589387.

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!