PHPackages                             jukkarau/wp-pwnd-passwords - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. jukkarau/wp-pwnd-passwords

ActiveWordpress-plugin[Security](/categories/security)

jukkarau/wp-pwnd-passwords
==========================

Check passwords against known pwnd passwords

26PHP

Since Mar 8Pushed 8y ago1 watchersCompare

[ Source](https://github.com/jukra/wp-pwnd-passwords)[ Packagist](https://packagist.org/packages/jukkarau/wp-pwnd-passwords)[ RSS](/packages/jukkarau-wp-pwnd-passwords/feed)WikiDiscussions master Synced 4w ago

READMEChangelogDependenciesVersions (1)Used By (0)

WP Pwnd Passwords
=================

[](#wp-pwnd-passwords)

Check WordPress user passwords against passwords previously appeared in data breaches.

Features
--------

[](#features)

- Uses [Pwnd Passwords API](https://haveibeenpwned.com/Passwords) range search to check the passwords
- Validates passwords on WordPress password reset form
- Validates passwords on WordPress user edit page

Why?
----

[](#why)

Even though WordPress offers password strength meter, many users might skip it and use their own passwords. This plugin at least prevents users from using passwords that are already appeared in some data breach. Bots bruteforcing WordPress logins use password lists that contain these passwords, so this plugin helps with users security.

Screenshots
-----------

[](#screenshots)

### Using bad password result

[](#using-bad-password-result)

[![Pwnd password](/assets/screenshot-1.png)](/assets/screenshot-1.png)

###  Health Score

20

—

LowBetter than 12% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity7

Limited adoption so far

Community4

Small or concentrated contributor base

Maturity41

Maturing project, gaining track record

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/8558140?v=4)[Jukka Rautanen](/maintainers/jukra)[@jukra](https://github.com/jukra)

### Embed Badge

![Health badge](/badges/jukkarau-wp-pwnd-passwords/health.svg)

```
[![Health](https://phpackages.com/badges/jukkarau-wp-pwnd-passwords/health.svg)](https://phpackages.com/packages/jukkarau-wp-pwnd-passwords)
```

###  Alternatives

[phpids/phpids

PHPIDS (PHP-Intrusion Detection System) is a simple to use, well structured, fast and state-of-the-art security layer for your PHP based web application

791150.0k2](/packages/phpids-phpids)[paragonie/ecc

PHP Elliptic Curve Cryptography library

25866.3k44](/packages/paragonie-ecc)[nicobleiler/php-passphrase

Passphrase generator with Laravel integration, inspired by Bitwarden. Uses the EFF long word list by default with support for custom wordlists.

4912.6k](/packages/nicobleiler-php-passphrase)[dwgebler/encryption

Encryption wrapper for PHP using libsodium — simple API for symmetric and asymmetric encryption, password hashing, digital signing, and message authentication.

317.5k](/packages/dwgebler-encryption)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)