This plugin enforces strong password policies for users with significant permissions on a site. It is designed for site owners and administrators who need to improve security by preventing users with content management abilities from setting weak passwords.

Targeted Enforcement: The check is applied specifically to users with capabilities like publish_posts, upload_files, and edit_published_posts, which typically covers Authors, Editors, and Administrators.

Customizable Triggers: Use the provided filter to modify the list of capabilities or roles that require a strong password, allowing you to extend enforcement to other user types or apply it universally.

Password Reset Coverage: The enforcement works on both the user profile edit screen and the password reset form, ensuring security during account recovery.

Integration with Core: It utilizes the site's built-in password strength meter (based on the zxcvbn library) to assess password strength, providing consistent feedback.

Role-Based Exception for New Users: When creating a new user, enforcement can be skipped for specific default roles considered low-risk, such as Subscribers, to simplify initial account setup.