Can anyone guide me in the right direction on how to loosen or disable the strong password policy? Would like to do it without the use of a plugin. I'm running a non-public site and don't need strong security. enter image description here

  • 1
    There is no "strong password policy" in wordpress – Mark Kaplun Jan 30 '16 at 14:41
  • 2
    Well, you cannot make a simple password, it will only accept very strong passwords, when you create an account as a user. Maybe "policy" is not the right word. make.wordpress.org/core/2015/07/28/passwords-strong-by-default – MrCalvin Jan 30 '16 at 22:01
  • 1
    It's not when creating the admin account or creating user-account in the backend. It's when a user creates his own account in the frontend. In my case using the e-commerce plugin WooCoomerce. But as far I can read this strong password policy is a WP core feature, not delivered by the plugin. But I find it VERY restrictive and I want to disable it or loosen it. I've added a screen-dump to my question. – MrCalvin Jan 31 '16 at 23:25
  • 1
    it's a WP core service. They implemented the library called "zxcvbn", made by Dropbox in 2012. – MrCalvin Feb 2 '16 at 8:31
  • 3
    I already did....but I have more faith in wordpress.stackexchange ;-) – MrCalvin Feb 3 '16 at 9:30

This will do it :-)

add_action( 'wp_print_scripts', 'DisableStrongPW', 100 );

function DisableStrongPW() {
    if ( wp_script_is( 'wc-password-strength-meter', 'enqueued' ) ) {
        wp_dequeue_script( 'wc-password-strength-meter' );

I found the solution here.

  • This did not work for me. I even tried changing it to 'password-strength-meter' – Flimm May 29 at 17:21

Just to update this answer:

add_action( 'wp_print_scripts', 'DisableStrongPW', 100 );

function DisableStrongPW() {
    if ( wp_script_is( 'user-profile', 'enqueued' ) ) {
        wp_dequeue_script( 'user-profile' );
  • Did anything change? New WP version? Haven't played with WP for some time now. – MrCalvin Jun 22 at 11:24

It can also be set in the wp_generate_password function. Just in case you use it for your own code. See: https://codex.wordpress.org/Function_Reference/wp_generate_password

  • This only changes the default suggested password, it doesn't change the minimum strength required of the chosen password. – Flimm May 29 at 17:21

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.