Vendic Admin Password Policy

vendic/magento2-admin-password-policy

Enforces stronger admin password rules (forbidden words, upper/lowercase and special-character requirements) and automatically deactivates admin users who have not logged in for 90 days.

Known issuesBuild failingsilver partnerSemVer violations (86% compliant)

Supported Magento versions: 2.4.9

1,098 installs★ 0 starsLatest: v1.0.7Released 2025-12-03License: MIT

composer require vendic/magento2-admin-password-policy

README

Reproduced from the package’s own README, under its own license, as of 2026-09-13. Links and images point back at the source repository.

Vendic_AdminPasswordPolicy

This module adds additional rules for admin passwords. It ensures that the following criteria are met for admin passwords:

  • Password does not contain first name, last name, username or email of the user.
  • Password does not contain 'guest', 'admin', or 'password'.
  • Password has at least one lowercase letter.
  • Password has at least one uppercase letter.
  • Password has at least one special character.

Additional rules can be added through di.xml to the rules constructor parameter of the following class: Vendic\AdminPasswordPolicy\Plugin\ValidatePassword Additional forbidden words can be added through di.xml to the forbiddenWords constructor parameter of the following class: Vendic\AdminPasswordPolicy\Rules\DoesNotContain

Users who have not logged in the past 90 days will automatically be set on inactive by a cron job that runs every midnight. It is possible to exclude users from being marked as inactive via configuration.

Installation

composer require vendic/magento2-admin-password-policy

Configuration

None at this moment. Feel free to create a pull request if you need specific settings. Check the issues for tickets that need help.

Compatibility

License

MIT

Authors

Links

More from vendic

  • Optimize Cache Size

    Reduces cache keys by removing product/category specific layout handles. Improves performance by decreasing cache size and average Redis TTL.

  • Google Address Autocomplete

    Adds Google Autocomplete to customer street address fields. Improves address entry and accuracy during checkout.

  • Clean Cron Schedule

    Automatically removes stale rows from the cron_schedule table once a day, preventing it from growing huge and causing slow cron runs and heavy CPU usage.

Similar modules

  • Codemirror

    Integrates the CodeMirror code editor into Magento 2 admin. Provides form elements for UI components and frontend models for system configuration.

  • Clean Admin Menu

    Consolidates third-party extension menus into a single "Extensions" menu. Organizes extension configurations under a unified tab in Stores > Configuration.

  • Hyvä Admin

    This module aims to make creating grids and forms in the Magento 2 adminhtml area joyful and fast, without usage of UI components.

← All packages from vendic