Is it possible to reduce the minimum character length for passwords?

A.) By default WordPress allows short passwords but “Confirm use of weak password” must be checked.

B.) Disable security plugins or change their settings if possible as they can and do override whatever WordPress implements by default.

C.) The latest consensus about passwords suggests the strongest passwords are extra long easy to remember phrases like: !-visited-!600-w-pennsylvan!a-avenue

Related Posts:

  1. Where to securely store API keys and passwords in WordPress?
  2. Why are passwords exportable as plain text in WordPress?
  3. How is password strength calculated?
  4. Make password invalid once logged out of password-protected page
  5. Can’t reset WordPress password
  6. Is the “lost password” feature truly a vulnerability?
  7. Frontend Password change
  8. Is there any point setting the keys and salts in wp-config.php?
  9. When is wp_set_password() called or how to capture a password
  10. Moving away from MD5: Where to declare the custom global $wp_hasher?
  11. How to get WordPress to send Password Reset Link Email instead of New Password?
  12. Basic password protection without using users and roles
  13. How can I force a specific password?
  14. Can a WordPress administrator see other users’ passwords?
  15. After limiting the access to my wp-login.php by IP through .htaccess, all my password-protected posts stopped working. What’s the best solution now?
  16. Password-protect feed and make it usable in major aggregators
  17. Could a user account with a stolen password compromised entire WP site?
  18. How to set custom validation for WordPress Passwords?
  19. Is my WP site being hacked?
  20. How to get real password (before encrypt) when register a user?
  21. Directory to store secure file
  22. Can you alter the default wordpress strong password requirements?
  23. What is the difference between a cer, pvk, and pfx file?
  24. How to solve “Kernel panic – not syncing – Attempted to kill init” — without erasing any user data
  25. Is it possible to decrypt SHA1
  26. Error `sec_error_revoked_certificate` when viewed in Firefox only
  27. Convert .pfx to .cer
  28. Why should I use the esc_url?
  29. Why escape if the_content isnt?
  30. Full path disclosure on rss-functions.php
  31. What to use instead of wp_kses() in user output
  32. Are the default salts secure?
  33. is_email() VS sanitize_email()
  34. Subscribe to email for security fixes?
  35. How to escape custom css?
  36. Understanding SVG vulnerabilities in WordPress related to a specific fix
  37. Moving wp-config.php: Can this be done after site launch?
  38. How to secure or disable the RSS feeds?
  39. How to get WordPress to save upload file beyond web root [closed]
  40. Is security a problem in WordPress?
  41. Moving wordpress out of the public directory
  42. Logout via Subdomain, non-wordpress page on a different server?
  43. Protecting HTML5 video [closed]
  44. How can I tell who changed the password?
  45. WordPress website Security [closed]
  46. Do I need to use the esc_html() function on hard coded links?
  47. Downloading File from Outside Web Root
  48. Why are xmlrpc.php and wp-cron.php being called so often?
  49. Using esc_html with HTML purifier and CSSTidy: Overkill?
  50. wordfence scan warning on W3 Total Cache [closed]
  51. site get login attempts after htaccess ip restriction
  52. Is it good security advice to install wordpress in subdirectory but link to root?
  53. wp-config.php modified?
  54. Moving wp-config.php up 2 levels
  55. How Could I sanitize the receive data from this code
  56. WordPress SQL Injections through User Agent
  57. How do I properly update the WordPress database password?
  58. How to save iframe tag into a post?
  59. How to prevent wp-login brute force attack from thousand of different IP? [duplicate]
  60. What permissions should I give directories if I want to make WordPress more secure?
  61. How to protect wp-admin through .htaccess?
  62. Something is unescaping all html entities before output to browser [closed]
  63. Is wp_kses the right approach in sanitizing this string?
  64. Reset Password policy
  65. Renaming install.php for security?
  66. Limit Login Attempts BEFORE PHP is executed?
  67. Which Versions of WordPress Ship with the Patched TimThumb?
  68. Safe to say WordPress security releases don’t have database upgrades
  69. Use global variables or function that returns said variables for site-wide private-ish WP settings?
  70. fail2ban to prevent Brute Force Attacks on WordPress?
  71. Use Google authentication for pages within a website [closed]
  72. How to give the same error message when the wrong password or wrong username is used?
  73. should I escape a literal url added in functions.php
  74. Moving wp-config.php outside root folder where we have multiple wordpress websites for enhanced security [duplicate]
  75. Force users to use password with specifications
  76. Adding Security Keys?
  77. How might I sanitize an XML file before WP Import? (Does wordpress verify or clean text when importing from an XML document? )
  78. Secret keys in SCM
  79. I need to find which is the file that checks the DB for correct login (username, password)
  80. Secure Server after configuration
  81. Uploading attachment (pdf) and prevent download for anonymous user
  82. How to make WP page accessile only to specific user roles
  83. Specific Page/Post Need to Stay Non SSL
  84. Block JSON access over the net
  85. Can someone do something to my website if I posted a snapped image of the header and covered my logo? (On reddit, when explaining a question)
  86. Blocking wp-login in HTACCESS has also blocked password protected pages
  87. Scan multiple websites for malware that are in same webhost root?
  88. The in-famous Unable to locate WordPress Content directory (wp-content) and the Direct Method
  89. Security: AWS (shared hosting) claims template file malicious
  90. How to check whether a site has been compromised without browsing into it?
  91. My site thinks it’s secure when it is fact not
  92. Is it possible to only have the admin interface bind to the local loopback?
  93. PHP Code Sniffer – WordPress VIP Coding Standards
  94. Trying to understand nature of hacking
  95. Default installation permissions for wp-config.php
  96. Correct setup to block file modifications from hackers
  97. Move data from wp-config to another file
  98. Heartbleed: What is it and what are options to mitigate it?
  99. OpenVPN vs. IPsec – Pros and cons, what to use?
  100. How to test if my server is vulnerable to the ShellShock bug?