Title: Password Strength Settings for WooCommerce Author: Danny Santoro Published: July 24, 2016 Last modified: October 11, 2023 --- Search plugins ![](https://ps.w.org/wc-password-strength-settings/assets/banner-772x250.jpg?rev =1719524) This plugin **hasn’t been tested with the latest 3 major releases of WordPress**. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress. ![](https://ps.w.org/wc-password-strength-settings/assets/icon-256x256.jpg?rev=1719526) # Password Strength Settings for WooCommerce By [Danny Santoro](https://profiles.wordpress.org/danielsantoro/) [Download](https://downloads.wordpress.org/plugin/wc-password-strength-settings.zip) * [Details](https://wordpress.org/plugins/wc-password-strength-settings/#description) * [Reviews](https://wordpress.org/plugins/wc-password-strength-settings/#reviews) * [Installation](https://wordpress.org/plugins/wc-password-strength-settings/#installation) * [Development](https://wordpress.org/plugins/wc-password-strength-settings/#developers) [Support](https://wordpress.org/support/plugin/wc-password-strength-settings/) ## Description Help secure your WooCommerce site by enforcing stronger passwords and taking additional control of your strength requirements. ### What does this plugin do? WooCommerce has an integrated Password Strength Meter which forces users to use strong passwords. Sometimes this isn’t desirable – with this plugin, you can choose between five password levels ranging from “Anything Goes” to “Strong Passwords Only”. In addition, you can modify the colors and appearance of these custom messages, as well as modify or remove the password hint. For details on how the password strength is determined, [please read the documentation here](https://github.com/DanielSantoro/wc-password-strength-settings/wiki/How-Password-Strength-is-Determined). #### What’s New? Version 3.0.0 is a bit of a rewrite to bring the plugin up to modern coding standards. Functionality should not be impacted, but if it is, please reach out on the support forums. Version 3.0.1 is simply a hotfix declaring compatibility with WooCommerce HPOS. Since this plugin doesn’t touch anything with the orders or order metadata, it shouldn’t be impacted at all. _However_, if you notice any issues then please reach out via the contact form on my website. #### Notes While this does allow for user accounts to have weaker passwords, it’s a good idea to still encourage strong password use – _especially_ for administrators! #### Planned Features * Option to remove “- Please enter a stronger password.” that is added by WordPress. * Nothing else at the moment, but let me know if you have any ideas. ## Installation 1. Download the plugin & install it to your `wp-content/plugins` folder (or use the Plugins menu through the WordPress Administration section) 2. Activate the plugin 3. Navigate to **WooCommerce > Settings > Accounts** and edit the fields at the bottom. There, you can choose the strength of the required passwords as well as change the messaging that appears as a user enters their password, change colors, and change any password guidelines. 4. Save and enjoy! ## FAQ ### Q: What does each level do? A: The levels range from 0 (lowest) to 4 (highest). As passwords are typed, the strength meter will dynamically update – this will disable the “Sign Up” button until the requirements have been met. It should be noted that Level 0 accepts any password, so messaging isn’t shown (and therefore doesn’t have admin fields). ### Q: Where does this meter show up? A: This should appear wherever the Password Strength Meter appears – in the “My Account” page or during Checkout. ### Q: How is the password strength determined? A: The password strength is determined by code in WordPress core, more specifically using a library called “zxcvbn”, created by Dropbox. There’s a more in-depth description of how this works in the [plugin documentation](https://github.com/DanielSantoro/wc-password-strength-settings/wiki). ### Q: How can I require numbers, special characters, or a certain length? A: This plugin doesn’t allow for that functionality, because it’s not part of the built-in WordPress password strength algorithms. Those restrictions have also been proven to be ineffective and frustrating for users. See [How Password Strength is Determined](https://github.com/DanielSantoro/wc-password-strength-settings/wiki/How-Password-Strength-is-Determined). ### Q: Why is my password marked as weak? A: This is the most common question I get, and the short answer is I don’t know, but you can likely figure it out with the guide on [How Password Strength is Determined](https://github.com/DanielSantoro/wc-password-strength-settings/wiki/How-Password-Strength-is-Determined). ### Q: This allows weak passwords during account creation in checkout – what gives? A: This is unfortunately unavoidable. As of writing, WooCommerce doesn’t validate the password strength in the checkout page, so while the strength meter will show it _doesn’t_ enforce it. This isn’t something I’m able to work around, so share that you want validation on the password strength requirements in the official WooCommerce [Ideas Board](http://ideas.woocommerce.com/forums/133476-woocommerce) – once it’s active in WooCommerce, it will automatically be active here. 🙂 ### Q: My site was recently hacked. Is this plugin vulnerable, or does it cause vulnerabilities? A: No, this plugin does not create any vulnerabilities. It does create additional displays for the _client-side_ (in the user’s browser), but not server-side where vulnerabilities are found. It is using the Password Strength Meter that is already in WordPress, and doesn’t store or handle any information – WordPress or WooCommerce are the only ones that see and manage passwords, not this plugin. For security advice, please [check out this older but still valid security 101 guide I’ve written](https://danielsantoro.com/locking-down-wordpress-security-101/). ### Q: Where can I go if I find an issue or want to recommend a feature? A: If you experience any issues, please [let the developer know](https://danielsantoro.com/support/?utm_source=pw-strength-plugin&utm_medium=plugin-readme). If you have ideas for future features or improvements, head over to [GitHub to see if something is in development or to help contribute](https://github.com/DanielSantoro/wc-password-strength-settings). ### Q: Dang, this is pretty awesome. Where can I see some of your other stuff? A: You can check out the Danny’s personal site at [DanielSantoro.com](https://danielsantoro.com?utm_source=pw-strength-plugin&utm_medium=plugin-readme). He doesn’t keep up with it as much as he’d like, but it’s there. ## Reviews ![](https://secure.gravatar.com/avatar/8b85c6ab21068e47a9b75a25e4a96d44922a194f5c549b4db4f88341e07e7d84? s=60&d=retro&r=g) ### 󠀁[great! but has stoped working](https://wordpress.org/support/topic/great-but-has-stoped-working/)󠁿 [amesmaili](https://profiles.wordpress.org/amesmaili/) September 19, 2021 1 reply pinterest error : rsS feed cannot be parsed it seems that pinterest has changed the xml format ![](https://secure.gravatar.com/avatar/f6cd0cc5207d71553acbb8c42f351bb1a1c9fec10cfe20edfbe4588919aabb97? s=60&d=retro&r=g) ### 󠀁[Best plugin](https://wordpress.org/support/topic/best-plugin-950/)󠁿 [webnoza](https://profiles.wordpress.org/webnoza/) October 24, 2020 I have tested a lot of plugins for this WordPress password requirements and nothing comes close to this. well done and thank you for your amazing work. ![](https://secure.gravatar.com/avatar/d96b1776315a1cf02d379a8e82e782f991b7158368e749e2fc2a4df17b5c99ca? s=60&d=retro&r=g) ### 󠀁[Fantastic!](https://wordpress.org/support/topic/fantastic-2608/)󠁿 [calynette](https://profiles.wordpress.org/calynette/) October 20, 2020 1 reply Just popped it in and worked like a charm! Good documentation even though I didn’t need it! – Thanks much ![](https://secure.gravatar.com/avatar/ff219f5801da33866721a02a392bdc0f87a1b7eaa9e36cb8ee4a80df4b6c5c81? s=60&d=retro&r=g) ### 󠀁[Compatibility](https://wordpress.org/support/topic/compatibility-185/)󠁿 [dominmax](https://profiles.wordpress.org/dominmax/) June 8, 2020 2 replies Hi, we have WP 5.4 and Woo 4.x now 🙂 When the plugin will be compatible? (then will be 5 stars) ![](https://secure.gravatar.com/avatar/a0f38829844fce319483d273a125551b392fdf0c3c6662ded3fbeb5e54a02123? s=60&d=retro&r=g) ### 󠀁[Works great.](https://wordpress.org/support/topic/works-great-5084/)󠁿 [Nadav Cohen](https://profiles.wordpress.org/amaa/) June 20, 2018 Works great. ![](https://secure.gravatar.com/avatar/445bcd22cc68120295e4cbbdb07fe2daece801e9bc51c5a285d42c9b95131fb7? s=60&d=retro&r=g) ### 󠀁[Allows users to create accounts below settings](https://wordpress.org/support/topic/allows-users-to-create-accounts-below-settings/)󠁿 [](https://profiles.wordpress.org/kariebarrett/) June 12, 2018 1 reply In our setup, this allowed users to create accounts at checkout that were less than the required settings. This resulted in Woocommerce being unable to auto log them in after checkout. They also couldn’t log in manually, as the password didn’t meet the requirements in the backend. [ Read all 25 reviews ](https://wordpress.org/support/plugin/wc-password-strength-settings/reviews/) ## Contributors & Developers “Password Strength Settings for WooCommerce” is open source software. The following people have contributed to this plugin. Contributors * [ Danny Santoro ](https://profiles.wordpress.org/danielsantoro/) “Password Strength Settings for WooCommerce” has been translated into 1 locale. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/wc-password-strength-settings/contributors) for their contributions. [Translate “Password Strength Settings for WooCommerce” into your language.](https://translate.wordpress.org/projects/wp-plugins/wc-password-strength-settings) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/wc-password-strength-settings/), check out the [SVN repository](https://plugins.svn.wordpress.org/wc-password-strength-settings/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/wc-password-strength-settings/) by [RSS](https://plugins.trac.wordpress.org/log/wc-password-strength-settings/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 2/22/2021 – Version 2.2.2 * Updated jQuery * Added the ability for future plugin update notices in update screen (for any critical messages). #### 10/21/2020 – Version 2.2.1 * Fixed some broken text domain strings (thank you, @alexclassroom – you are wonderful.) #### 8/21/2020 – Version 2.2.0 * Added localization for various languages * Confirmed compatibility with the latest WordPress and WooCommerce versions * FAQ update RE: Security #### 4/25/2019 – Version 2.1.0 * Enabled localization for all text in the plugin’s admin section. * Confirmed compatibility with WordPress 5.1.1 and WooCommerce 3.6.2. #### 2/9/2018 – Version 2.0.2 * Cleaned up code in preparation for Localization * Getting ready for additional options like changing extra text * FAQ Update * Confirmed WooCommerce/WordPress compatibility #### 9/21/2017 – Version 2.0.1 * Fixed a few spacing and semantic issues * Fixed broken link in readme.txt * Added version checking compatibility for WooCommerce 3.2 – tested working #### 8/25/2017 – Version 2.0.0 * Total plugin rewrite from the ground up * Added quick links in Plugin Overview page to Documentation and Support * Created an Admin Screen class to better contain information * Added ability to change the messaging color per level (with built-in color picker or hex codes) * Added ability to change or disable the Password Hint messaging * Added ability to hide the emoji display * Removed “Level 1” fields, as they were not used in actual calculation or display * Tested through WordPress 4.8.1 and WooCommerce 3.1.2 * Unfortunately, this broke multilingual support. If someone wants to jump in in the GitHub, that would be great! #### 8/1/2017 – Version 1.2.0 * Add multilingual support and zh_TW translated thanks to [AthenaTzeng](https://github.com/AthenaTzeng) #### 4/5/2017 – Version 1.1.0 * Added fields to allow for custom messaging as a user is inputting passwords * Added rynald0s as a co-author, because he’s a modern-day superhero #### 3/28/2017 – Version 1.0.2 * Readme fixes, added setting to change password strength meter labels / password error message #### 9/28/2016 – Version 1.0.1 * Readme fixes, version check to WordPress 4.6 compatibility #### 7/24/2016 – Version 1.0.0 * Initial Release ## Meta * Version **3.0.1** * Last updated **3 years ago** * Active installations **10,000+** * WordPress version ** 5.8 or higher ** * Tested up to **6.3.8** * Languages * [Chinese (Taiwan)](https://tw.wordpress.org/plugins/wc-password-strength-settings/) and [English (US)](https://wordpress.org/plugins/wc-password-strength-settings/). * [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/wc-password-strength-settings) * Tags * [accounts](https://wordpress.org/plugins/tags/accounts/)[passwords](https://wordpress.org/plugins/tags/passwords/) [security](https://wordpress.org/plugins/tags/security/)[users](https://wordpress.org/plugins/tags/users/) [woocommerce](https://wordpress.org/plugins/tags/woocommerce/) * [Advanced View](https://wordpress.org/plugins/wc-password-strength-settings/advanced/) ## Ratings 4.5 out of 5 stars. * [ 19 5-star reviews ](https://wordpress.org/support/plugin/wc-password-strength-settings/reviews/?filter=5) * [ 3 4-star reviews ](https://wordpress.org/support/plugin/wc-password-strength-settings/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/wc-password-strength-settings/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/wc-password-strength-settings/reviews/?filter=2) * [ 2 1-star reviews ](https://wordpress.org/support/plugin/wc-password-strength-settings/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/wc-password-strength-settings/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/wc-password-strength-settings/reviews/) ## Contributors * [ Danny Santoro ](https://profiles.wordpress.org/danielsantoro/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/wc-password-strength-settings/)