5 ms·
Interesting addition to the plugin: check admin login credentials with the passwords on the list. If found, notify the admin and disable his account until he re
by annnnd 12y ago
Interesting addition to the plugin: check admin login credentials with the passwords on the list. If found, notify the admin and disable his account until he resets the password to something better.
Of course, you would have to accumulate the list across many computers and distribute it to WP servers... And be careful NOT to include misspelled passwords (invalid login followed by a valid login). :)
I am also not sure "top X passwords" list would be enough - you should probably check against the whole list, which could be huge.