8

Can anyone guide me in the right direction on how to loosen or disable the strong password policy? Would like to do it without the use of a plugin. I'm running a non-public site and don't need strong security. enter image description here

Improve this question
8
  • 1
    There is no "strong password policy" in wordpress – Mark Kaplun Jan 30 '16 at 14:41
  • 2
    Well, you cannot make a simple password, it will only accept very strong passwords, when you create an account as a user. Maybe "policy" is not the right word. make.wordpress.org/core/2015/07/28/passwords-strong-by-default – MrCalvin Jan 30 '16 at 22:01
  • 1
    It's not when creating the admin account or creating user-account in the backend. It's when a user creates his own account in the frontend. In my case using the e-commerce plugin WooCoomerce. But as far I can read this strong password policy is a WP core feature, not delivered by the plugin. But I find it VERY restrictive and I want to disable it or loosen it. I've added a screen-dump to my question. – MrCalvin Jan 31 '16 at 23:25
  • 1
    it's a WP core service. They implemented the library called "zxcvbn", made by Dropbox in 2012. – MrCalvin Feb 2 '16 at 8:31
  • 3
    I already did....but I have more faith in wordpress.stackexchange ;-) – MrCalvin Feb 3 '16 at 9:30
11

This will do it :-)

add_action( 'wp_print_scripts', 'DisableStrongPW', 100 );

function DisableStrongPW() {
    if ( wp_script_is( 'wc-password-strength-meter', 'enqueued' ) ) {
        wp_dequeue_script( 'wc-password-strength-meter' );
    }
}

I found the solution here.

Improve this answer
1
  • This did not work for me. I even tried changing it to 'password-strength-meter' – Flimm May 29 '19 at 17:21
3

Currently it's not possible to change the strength requirements of the password. You can only deactivate it the functionality completely by dequeueing the password script:

add_action( 'wp_print_scripts', 'DisableStrongPW', 100 );

function DisableStrongPW() {
    if ( wp_script_is( 'user-profile', 'enqueued' ) ) {
        wp_dequeue_script( 'user-profile' );
    }
}

For changing the minimum strength of the password I can recommend this plugin which builds on the same library and integrates nicely into woocommerce: https://wordpress.org/plugins/wc-password-strength-settings/

Improve this answer
1

Just to update this answer:

add_action( 'wp_print_scripts', 'DisableStrongPW', 100 );

function DisableStrongPW() {
    if ( wp_script_is( 'user-profile', 'enqueued' ) ) {
        wp_dequeue_script( 'user-profile' );
    }
}
Improve this answer
1
  • Did anything change? New WP version? Haven't played with WP for some time now. – MrCalvin Jun 22 '19 at 11:24
-1

It can also be set in the wp_generate_password function. Just in case you use it for your own code. See: https://codex.wordpress.org/Function_Reference/wp_generate_password

Improve this answer
1
  • This only changes the default suggested password, it doesn't change the minimum strength required of the chosen password. – Flimm May 29 '19 at 17:21

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.