Skip to content
Danny Santoro edited this page Aug 21, 2020 · 6 revisions

Welcome to the wiki! This serves as a documentation page, additional details, and anything else as I go.

What does this plugin do?

WC Password Strength Settings allows WooCommerce store owners to change the required password strength for new accounts. Additionally, it gives the store owner extra display options, such as allowing them to change text colors, disable emoticons, hide password strength messaging, and even add your own password messages.

The plugin is built on top of the zxcvbn library originally written by Dropbox, publicly available on GitHub here. This password strength library is the same one integrated into WordPress core, and is therefore used by both WooCommerce and this plugin - why break what doesn't work?

Minimum Requirements

This plugin was built and tested using the following versions (as of release 2.2.0):

  • WordPress version 5.5.0
  • WooCommerce version 4.4.1

It may certainly work with older versions of both, but for best results ensure that your software is up-to-date.

Installation & Setup

To install WC Password Strength Settings, download it from the WordPress.org Repository or go to Plugins > Add New in your WordPress installation and search for "WC Password Strength Settings". If you downloaded the .zip file, then you can add it by going to Plugins > Add New > Upload and select the .zip file... Basically, just like any other plugin.

To configure your settings, open your WooCommerce Accounts Settings by going to WooCommerce > Settings > Accounts. The fields for WC Password Strength Settings are below the default Account fields.

Configuration & Settings

Right away, you can set your Strength Requirement on a scale from 1 to 5, where 1 allows for any password and 5 requires a very strong password. Please read How Password Strength is Determined to understand how it's graded and see some examples of passwords for each level. Level 4 is the default WooCommerce value.

The next ten fields are five pairs, each asking for a Level Message and Text Color. The text entered in that field is what will display under the password field, paired with the text color for that level. You can have a different color for each level or leave them blank which will default to the built-in WooCommerce messaging.

  • Note that_ - Please enter a stronger password. _will be added after messages that don't meet the minimum strength.
  • I actually don't know what will trigger the Error message and color display (there's a dedicated message to this), but just in case it's still there. It's likely if there's an error in sending the password or something like that, but if you find out, let me know!

Password Hint Text changes the messaging that comes up when the password doesn't meet minimum requirements. By default, WooCommerce displays:

Hint: The password should be at least twelve characters long. To make it stronger, use upper and lower case letters, numbers, and symbols like ! " ? $ % ^ & ).

This is somewhat misleading, as passwords don't need a certain length or specific characters to be strong passwords and there isn't a way to enforce these rules on your site without a different password algorithm. You can add your own custom hint in this field.

The Disable Hint checkbox will remove the Password Hint Text from displaying at all (even your custom messaging).

The Disable Emoticons checkbox will remove the smiley face that WooCommerce adds on at the end of the level messages.