Since i'm doing Wordpress hardening for a project and ran into some questions that I haven't found a good answer online. If anyone has had any experience with this kind of stuff or have any know-how about this even a plugin recommendation it would be really appreciated.
When admin is resetting all users password are the users getting notified about the password reset? I read that with some "Emergency password reset" plugin it is available, but is it a built in feature in Wordpress or no.
When user changes his/her password, the user shouldn't be able to use the last password again. Is there a builtin functionality in Wordpress for this or a external plugin?
Is it possible to force users for certain password patterns. For ex. not allowing users to use more than 2 same letter straight in a row and force in symbols, number and lower and uppercase letters.
When Admin adds a new user the new user gets and email for creating his/her self a password. Is it possible to make the password generation link to expire after 24/48h?
It would be best, if there is no default functionality built into Wordpress, to get the hands on a plugin that would answer all of the 4 problematic points.