StrandLock is a security plugin designed for website administrators who need enhanced control and auditing over user password management. It is particularly useful for teams managing multiple user accounts where tracking credential changes is important.

• External Password Storage: User passwords are not stored in the standard website database. Instead, they are kept in a separate, encrypted database, adding an extra layer of security.
• Admin Area Restriction: The plugin prevents password changes from being made through the standard website admin area. All password modifications must go through the dedicated StrandLock interface.
• Audit Trail: It maintains a log of all password-related actions, including who changed a password and when, providing accountability for administrative changes.
• Direct Database Updates: When a password is updated via StrandLock, it writes the new, encrypted password hash directly to the appropriate user record in the website's database, ensuring synchronization.
• Separate Management Interface: Password management is handled through its own admin panel, centralizing control and separating this sensitive function from other site administration tasks.