I'm looking for a way to force using strong password when we create reset and change users password on WordPress backoffice.
Password complexity must be at least 12 characters in length, and have at least one uppercase letter, one lowercase letter, one number, and one special character.
Passwords of administrator role must be changed every 45 days at a minimum. other user's passwords must be changed every 90 days at a minimum.
Password history rules must be implemented to prevent reuse.
About storing password to prevent reuse. There is a plugin:
For password policy I found this plugin:
But it's out to date. so I still looking for a hook to integrate on functions.php for password policy.