Enforce strong password policies

[rifathasan]

After vulnerabilities, the next biggest reason for WordPress sites to get hacked is bad passwords . Passwords are often the weakest link in WordPress security for two reasons:

Easy to remember, so easy to guess: We have seen countless sites hacked because administrators set passwords like: pass@123, P@ssword or some combination. Hackers skype database use bots that try common passwords with different combinations to hack WordPress sites. Sometimes bots can try up to several hundred passwords per minute.
Data breach due to hacking: Passwords are hard to remember, so people tend to reuse them across different sites and products. However, if one of these sites is hacked and a data breach occurs, your credentials will be compromised. Hackers have both the tokens – your email address and password – needed to hack your site.
You can use a plugin to provide strong passwords for all your users. Users will need to set strong passwords that have not been compromised in a data breach. It is understandable that complex passwords are also difficult to remember, so we recommend using password managers . The small inconvenience is definitely worth the security they will bring to your site.