P
Security Free WordPress.org

Password Strength Settings for WooCommerce

4.5 (24 reviews)
· 10K+ active installs · By Danny Santoro
Active Installs
10K+
Rating
4.5 / 5
Version
v3.0.1
Last Updated
Oct 2023
Share

Plugin Review

AI-Researched

What is Password Strength Settings for WooCommerce?

Password Strength Settings for WooCommerce is a focused utility plugin that overrides the default WooCommerce password strength meter. Created by developer Danny Santoro, this 10-year-old plugin lets store owners choose from five distinct password levels. These range from "Anything Goes" (level 0) to "Strong Passwords Only" (level 4). The plugin currently holds 10K+ active installs and a 4.5/5 rating from 24 reviews. Of those, 79% are 9% are one-star.

The plugin addresses a specific need: you can disable the password strength meter woocommerce enforces by default. It also allows you to change woocommerce password strength settings without touching code. Version 3.0.1 was released as a rewrite to modern coding standards, with a hotfix on Oct 11, 2023 to declare compatibility with WooCommerce HPOS. The plugin works on WordPress 5.8+ and has been tested up to 6.3.8.

Key Features of Password Strength Settings for WooCommerce

  • Five Password Strength Levels — Choose from level 0 (accept any password) to level 4 (strong passwords only), dynamically updating the meter as users type.
  • Customizable Color & Appearance — Modify the colors and visual styling of the password strength messages to match your store’s branding.
  • Password Hint Modification — Edit or completely remove the default password hint text shown to customers during registration.
  • Custom Message Management — Alter the messaging that appears beneath the password field, including a planned option to remove WordPress’s "- Please enter a stronger password." text.
  • Checkout & My Account Integration — The meter appears wherever WooCommerce places it: the My Account page or during checkout account creation.
  • HPOS Compatible — version 3.0.1 explicitly declares compatibility with WooCommerce High-Performance Order Storage, though the plugin doesn’t touch order data.
  • No Unnecessary Restrictions — The plugin intentionally avoids requiring numbers, special characters, or minimum lengths, citing research that such restrictions frustrate users without improving security.
  • Lightweight Rewrite — The 3.0.0 update brought the codebase up to modern standards without changing functionality.

Who Should Use Password Strength Settings for WooCommerce?

This plugin suits store owners who need granular control over woocommerce password requirements. It is ideal for membership sites, wholesale stores, or any shop where you want to set minimum password length woocommerce style restrictions — or remove them entirely. The interface lives under WooCommerce > Settings > Accounts, making it accessible to users with basic WordPress admin skills. With 10K+ installs, it clearly serves a broad audience of store operators who find the default "strong only" setting too restrictive.

However, the developer includes a clear warning: allowing weaker passwords is acceptable for customer accounts, but administrators should still use strong passwords. This makes the plugin less suitable for sites where all users require high security. The 79% five-star rating suggests most users find the functionality works as advertised, though the 8% one-star rate indicates some encounter issues — likely related to the plugin’s limitation that it cannot enforce custom character or length rules.

Installation & Setup

Install the plugin via the WordPress admin Plugins menu or by uploading it to wp-content/plugins. Activate it, then navigate to WooCommerce > Settings > Accounts. Scroll to the bottom to find the new fields. Select your desired strength level from the dropdown. The setup takes under two minutes and requires no coding knowledge.

Support & Community

Support data shows a concerning picture. Over the last two months, the plugin had 0 open threads and 0 resolved threads, yielding a 0% resolution rate. This likely reflects low support activity rather than poor service — the developer directs users to a contact form on his personal website for issues. The 10-year plugin age suggests a stable, mature codebase that rarely requires troubleshooting.

The rating breakdown reveals a polarized user base. Nearly 8 out of 10 ratings are five-star, praising the straightforward functionality. The 8% one-star group probably expected features the plugin explicitly does not offer — like the ability to set minimum password length woocommerce requirements or enforce special characters. The FAQ directly addresses these missing features, explaining they are not part of WordPress’s built-in zxcvbn algorithm and are intentionally omitted.

Pros & Cons

What's Good
  • With 10K+ active installs and a 4.5 rating from 24 reviews, this plugin is widely trusted for adjusting WooCommerce password strength.
  • It offers five distinct password levels from "Anything Goes" to "Strong Passwords Only", giving site owners fine-grained control over security requirements.
  • 79% of its 24 ratings are 5-star, indicating high user satisfaction with its core functionality of modifying the password strength meter.
  • The plugin allows customization of password hint text, colors, and appearance, enabling alignment with a site's branding or user experience needs.
  • version 3.0.1 was rewritten to modern coding standards, and version 3.0.1 added HPOS compatibility, showing ongoing maintenance despite zero support threads.
Drawbacks
  • With zero total support threads, users have no public record of resolved issues, which may indicate limited community support or lack of troubleshooting resources.
  • The plugin does not address the WordPress-added "- Please enter a stronger password." text, a planned feature that remains unimplemented.
  • It provides no granular per-role password strength settings, so all user types (including admins) are subject to the same global rule, which could weaken security for privileged accounts.
  • The plugin's 8% 1-star rating suggests some users encountered issues, possibly related to compatibility or unexpected behavior after updates.

Technical Details

Requires WordPress
5.8+
Tested up to WP
6.3.8
First Released
2016 (10+ years)
Support (last 2 months)
0 threads

Feature Tags

accounts passwords security users woocommerce

Frequently Asked Questions