PHPackages                             jiushutech/force-password-change - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. jiushutech/force-password-change

ActiveFlarum-extension[Security](/categories/security)

jiushutech/force-password-change
================================

This is a Flarum extension that forces users created by administrators to change their password on their first login.

v2.0.0(5mo ago)12MITJavaScript

Since Nov 23Pushed 3mo agoCompare

[ Source](https://github.com/jiushutech/force-password-change)[ Packagist](https://packagist.org/packages/jiushutech/force-password-change)[ RSS](/packages/jiushutech-force-password-change/feed)WikiDiscussions main Synced 1mo ago

READMEChangelogDependencies (1)Versions (3)Used By (0)

Force Password Change / 强制修改密码
==============================

[](#force-password-change--强制修改密码)

[![Latest Version](https://camo.githubusercontent.com/8428f26cb237badffe45528cfd74cb00c875870b6cdd966d8a7e8b36731004a9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f762f72656c656173652f6a6975736875746563682f666f7263652d70617373776f72642d6368616e6765)](https://github.com/jiushutech/force-password-change/releases)[![License](https://camo.githubusercontent.com/7013272bd27ece47364536a221edb554cd69683b68a46fc0ee96881174c4214c/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d4d49542d626c75652e737667)](LICENSE)[![Flarum](https://camo.githubusercontent.com/3cba3fa5e294fd6b1496b24277c41b632b852165177b0076ae5ce28d05e4f5de/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f666c6172756d2d253545312e382e302d6f72616e67652e737667)](https://flarum.org)

这是一个Flarum扩展，强制管理员创建的用户在首次登录时更改密码，并提供实时密码验证反馈。

[English](#english) | [简体中文](#%E7%AE%80%E4%BD%93%E4%B8%AD%E6%96%87)

---

English
-------

[](#english)

This is a Flarum extension that forces users created by administrators to change their password on their first login, with real-time password validation feedback.

### ✨ Features

[](#-features)

#### v2.0.0 New Features

[](#v200-new-features)

- 🎯 **Real-time Password Validation**: Live feedback as users type their password
- ✓ **Visual Password Strength Indicator**: Green checkmarks for met requirements, gray circles for unmet
- ⚙️ **Comprehensive Admin Settings**: Configure password policies in admin panel
- 🇨🇳 **Fully Localized**: Complete Chinese interface

#### Core Features

[](#core-features)

- Forces password change on first login for admin-created users
- Customizable password requirements
- No email verification required
- Clean modal interface
- Multi-language support

### 🔐 Password Policy Settings

[](#-password-policy-settings)

Administrators can configure:

- Minimum password length (1-100 characters)
- Require uppercase letters (A-Z)
- Require lowercase letters (a-z)
- Require numbers (0-9)
- Require special characters (!@#$%^&\*...)

### 📦 Installation

[](#-installation)

```
composer require jiushutech/force-password-change
php flarum migrate
php flarum cache:clear
```

### 🚀 Usage

[](#-usage)

1. Install and enable the extension
2. Configure password policy in admin panel (optional)
3. When admin creates a user, they are automatically flagged
4. On first login, user sees password change modal with requirements
5. User inputs password and sees real-time validation
6. Flag is cleared after successful password change

### 📸 Screenshots

[](#-screenshots)

**Password Requirements Display:**

```
Password Requirements:
✓ At least 8 characters
✓ At least one uppercase letter (A-Z)
○ At least one lowercase letter (a-z)
✓ At least one number (0-9)
○ At least one special character (!@#$%^&*...)

```

### 🛠️ Development

[](#️-development)

```
cd js
npm install
npm run dev    # Development mode with watch
npm run build  # Production build
```

### 📖 Documentation

[](#-documentation)

- [CHANGELOG.md](CHANGELOG.md) - Version history
- [DEPLOY.md](DEPLOY.md) - Deployment guide
- [UX\_IMPROVEMENT.md](UX_IMPROVEMENT.md) - UX improvements

### 🤝 Contributing

[](#-contributing)

Contributions are welcome! Please feel free to submit a Pull Request.

### 📄 License

[](#-license)

MIT

---

简体中文
----

[](#简体中文)

这是一个Flarum扩展，强制管理员创建的用户在首次登录时更改密码，并提供实时密码验证反馈。

### ✨ 功能特性

[](#-功能特性)

#### v2.0.0 新功能

[](#v200-新功能)

- 🎯 **实时密码验证**：输入密码时即时反馈验证结果
- ✓ **可视化密码强度指示器**：满足要求显示绿色✓，未满足显示灰色○
- ⚙️ **完整的后台管理设置**：在管理面板配置密码策略
- 🇨🇳 **完全中文化**：所有界面均为中文

#### 核心功能

[](#核心功能)

- 管理员创建用户时自动标记需要修改密码
- 可自定义密码要求
- 无需邮箱验证流程
- 简洁的对话框界面
- 支持多种语言

### 🔐 密码策略设置

[](#-密码策略设置)

管理员可配置：

- 最小密码长度（1-100 字符）
- 需要大写字母（A-Z）
- 需要小写字母（a-z）
- 需要数字（0-9）
- 需要特殊字符（!@#$%^&\*...）

### 📦 安装方法

[](#-安装方法)

```
composer require jiushutech/force-password-change
php flarum migrate
php flarum cache:clear
```

### 🚀 使用说明

[](#-使用说明)

1. 安装并启用插件
2. 在后台配置密码策略（可选）
3. 管理员创建用户时自动添加标记
4. 用户首次登录时看到密码修改弹窗和要求
5. 用户输入密码时看到实时验证反馈
6. 修改成功后标记自动清除

### 📸 界面预览

[](#-界面预览)

**密码要求显示：**

```
密码要求：
✓ 至少 8 个字符
✓ 至少一个大写字母 (A-Z)
○ 至少一个小写字母 (a-z)
✓ 至少一个数字 (0-9)
○ 至少一个特殊字符 (!@#$%^&*...)

```

### 🛠️ 开发

[](#️-开发)

```
cd js
npm install
npm run dev    # 开发模式（实时监控）
npm run build  # 生产构建
```

### 📖 文档

[](#-文档)

- [CHANGELOG.md](CHANGELOG.md) - 版本更新历史
- [DEPLOY.md](DEPLOY.md) - 部署指南
- [UX\_IMPROVEMENT.md](UX_IMPROVEMENT.md) - 用户体验改进说明

### 🤝 贡献

[](#-贡献)

欢迎贡献！请随时提交 Pull Request。

### 📄 许可证

[](#-许可证)

[MIT](LICENSE)

支持 / Support
------------

[](#支持--support)

如有问题或建议，请提交 Issue 或 Pull Request。

For issues or suggestions, please submit an Issue or Pull Request.

- **GitHub Issues**:
- **Email**: [it\_admin@ninesure.com](mailto:it_admin@ninesure.com)

---

**🎉 v2.0.0 - 让密码修改变得简单、直观、安全！**

###  Health Score

32

—

LowBetter than 72% of packages

Maintenance77

Regular maintenance activity

Popularity4

Limited adoption so far

Community8

Small or concentrated contributor base

Maturity36

Early-stage or recently created project

 Bus Factor1

Top contributor holds 90% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~0 days

Total

2

Last Release

167d ago

Major Versions

v1.0.0 → v2.0.02025-11-23

### Community

Maintainers

![](https://www.gravatar.com/avatar/86b840b420ffd841e68a30ae7047f5ab4b7684ab94df56c752cae92496534840?d=identicon)[jiushutech](/maintainers/jiushutech)

---

Top Contributors

[![jiushutech](https://avatars.githubusercontent.com/u/245651560?v=4)](https://github.com/jiushutech "jiushutech (9 commits)")[![squirrelmedia](https://avatars.githubusercontent.com/u/45858036?v=4)](https://github.com/squirrelmedia "squirrelmedia (1 commits)")

---

Tags

securitypasswordextensionflarum

### Embed Badge

![Health badge](/badges/jiushutech-force-password-change/health.svg)

```
[![Health](https://phpackages.com/badges/jiushutech-force-password-change/health.svg)](https://phpackages.com/packages/jiushutech-force-password-change)
```

###  Alternatives

[spooner-web/be_secure_pw

You can set password conventions to force secure passwords for BE users.

10461.3k](/packages/spooner-web-be-secure-pw)[pentagonal/phpass

PHP password hashing library original by open wall PhPass

121.6k](/packages/pentagonal-phpass)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)