The ‘Strong Passwords’ add-on forces users to use more secure passwords than base WordPress. When enabled, you can set a minimum length and complexity for user passwords.
The complexity score measures how difficult the password is to crack. This approach is more secure than the common method of forcing users to enter some combination of letters, numbers, and special characters. The complexity calculation utilizes the Zxcvbn algorithm developed by Dropbox.
The strong password add-on is enabled by default. You should only disable it when you have some other security mechanism and don’t want them to conflict.
Setup
Once enabled, a new admin page is available.
Mailing Address