Title: Yard | Warden Author: Yard | Digital Agency Published: আগষ্ট 21, 2026 Last modified: আগষ্ট 21, 2026 --- প্লাগিনৰ সন্ধান কৰক ![](https://ps.w.org/yard-warden/assets/banner-772x250.png?rev=3658261) ![](https://ps.w.org/yard-warden/assets/icon-256x256.png?rev=3658261) # Yard | Warden [Yard | Digital Agency](https://profiles.wordpress.org/yarddigitalagency/)-ৰ দ্বাৰা [ডাউনল’ড কৰক](https://downloads.wordpress.org/plugin/yard-warden.1.0.5.zip) * [বিশদ বিৱৰণ](https://as.wordpress.org/plugins/yard-warden/#description) * [পৰ্য্যালোচনা](https://as.wordpress.org/plugins/yard-warden/#reviews) * [ইনষ্টলেশ্যন](https://as.wordpress.org/plugins/yard-warden/#installation) * [বিকাশ](https://as.wordpress.org/plugins/yard-warden/#developers) [সাহায্য](https://wordpress.org/support/plugin/yard-warden/) ## বৰ্ণনা Yard Warden hardens core WordPress password and login flows: * **Password strength** via [zxcvbn-php](https://github.com/bjeavons/zxcvbn-php). Scores passwords 0-4 (default 4) based on real guessability, not arbitrary character- class rules. User inputs (login, email, display name) are fed to zxcvbn so passwords containing them score lower. * **Minimum length** enforcement (default 16) on top of the zxcvbn score. * **Generic login errors** to prevent username enumeration on the wp-login form. Always on, no toggle. Only applies to authentication failures; password-reset and profile-update validation errors remain verbose so users can correct their input. * **Safer multisite onboarding.** Auto-activates new signups server-side so no activation link is emailed and the wp-activate.php landing page (which would print username + plaintext password) is never reached. The welcome email is rewritten to contain a one-time password-reset link instead of a generated password. * **Login limiting** via transient-based counters across three dimensions (IP+Username, IP, Username). Locks out brute-force attempts. Admin can clear all counters via Settings > Yard Warden. #### Filters * `yard::warden/password/min-length` (default `16`) – Minimum character count. * `yard::warden/password/min-score` (default `4`) – Minimum zxcvbn score (0-4). * `yard::warden/login/generic-error` (default `Invalid credentials.`) – Replacement login error message. * `yard::warden/login/leaky-error-codes` (default `['invalid_username', 'invalid_email',' incorrect_password']`) – WP_Error codes to rewrite. * `yard::warden/onboarding/welcome-subject` (default `Welcome to !`) – Multisite welcome email subject. * `yard::warden/onboarding/welcome-body` (default reset-link body) – Full welcome email body. Receives `$user`, `$resetUrl`, original body. * `yard::warden/limit-login/enabled` (default `true`) – Set to `false` to disable login limiting entirely. * `yard::warden/limit-login/client-ip` (default `REMOTE_ADDR`) – Override IP detection( e.g. for reverse proxies). * `yard::warden/limit-login/error-message` (default `Too many failed login attempts...`)– Lockout error shown to the user. * `yard::warden/limit-login/skip-error-codes` (default `['expired_session']`) – WP_Error codes that do not count as failed attempts. * `yard::warden/limit-login/threshold/{dimension}` (default `5` / `50` / `3`) – Attempts before lockout per dimension (`ip_user` / `ip` / `username`). * `yard::warden/limit-login/window/{dimension}` (default `300` / `3600` / `1500`)– Counting window in seconds per dimension. * `yard::warden/limit-login/lockout/{dimension}` (default `300` / `3600` / `1500`)– Lockout duration in seconds per dimension. #### Policy override example ``` add_filter('yard::warden/password/min-score', function (int $score) { return max($score, 4); }); ``` ## ইনষ্টলেশ্যন 1. Upload the plugin files to `/wp-content/plugins/yard-warden`, or install through the Plugins screen directly. 2. Activate the plugin through the “Plugins” screen in WordPress. 3. Configure login-limit thresholds via Settings > Yard Warden, or override any default via the filters above. ## সঘনাই উত্থাপিত প্ৰশ্ন ### Does this add password expiry or forced rotation? No. Forced password rotation is not implemented; it pushes users toward weaker, predictable passwords rather than improving security. ### Can I disable login limiting? Yes, via the `yard::warden/limit-login/enabled` filter. ## পৰ্য্যালোচনা এই প্লাগিনৰ বাবে কোনো পৰ্য্যালোচনা নাই। ## অৱদানকাৰী আৰু বিকাশকাৰীসকল “Yard | Warden” হৈছে মুক্ত উৎসৰ ছফ্টৱেৰ। এইসকল লোকে এই প্লাগিনত অৱদান আগবঢ়াইছে। অৱদানকাৰীসকল * [ Yard | Digital Agency ](https://profiles.wordpress.org/yarddigitalagency/) [আপোনাৰ ভাষাত “Yard | Warden” অনুবাদ কৰক।](https://translate.wordpress.org/projects/wp-plugins/yard-warden) ### বিকাশৰ প্ৰতি আগ্ৰহী? [ক’ড ব্ৰাউজ কৰক](https://plugins.trac.wordpress.org/browser/yard-warden/), [SVN ৰিপজিটৰী](https://plugins.svn.wordpress.org/yard-warden/) চাওক নাইবা [RSS](https://plugins.trac.wordpress.org/log/yard-warden/?limit=100&mode=stop_on_copy&format=rss)- দ্বাৰা [বিকাশৰ পঞ্জী](https://plugins.trac.wordpress.org/log/yard-warden/) ছাবস্ক্ৰাইব কৰক। ## সলনি-পঞ্জী #### 1.0.5 * Source code published on GitHub and the package registered on Packagist. * Added the EUPL-1.2 licence text and declared it in composer.json. #### 1.0.4 * Fixed a fatal error when the plugin is installed via Composer, where dependencies are autoloaded by the project instead of the plugin. #### 1.0.3 * Minimum WordPress version raised to 6.3. * Bundled Dutch translations removed; translations are now served through translate. wordpress.org. * WP_Error codes prefixed with yard_warden_ to avoid collisions with other plugins. * Login-limit transient keys prefixed with yard_warden_ll_. * Welcome-email opt-out query flag renamed to yard_warden_disable_welcome_email. #### 1.0.2 * Text domain adjusted to yard-warden. #### 1.0.0 * Initial release. ## মেটা * **1.0.5** সংস্কৰণ * **1 মাহ আগত** শেষবাৰ আপডে’ট হৈছিল * সক্ৰিয় ইনষ্টলেশ্যন **30+** * WordPress-ৰ সংস্কৰণ ** 6.3 বা তাতকৈ ওপৰৰ ** * ইমানলৈকে পৰীক্ষা কৰা হৈছে **7.0.6** * PHP-ৰ সংস্কৰণ ** 7.4 বা তাতকৈ ওপৰৰ ** * ভাষা * [English (US)](https://wordpress.org/plugins/yard-warden/) * [Brute Force](https://as.wordpress.org/plugins/tags/brute-force/)[login](https://as.wordpress.org/plugins/tags/login/) [multisite](https://as.wordpress.org/plugins/tags/multisite/)[password](https://as.wordpress.org/plugins/tags/password/) [security](https://as.wordpress.org/plugins/tags/security/) * টেগবোৰ * [উচ্চখাপৰ ভিউ](https://as.wordpress.org/plugins/yard-warden/advanced/) ## ৰে’টিংবোৰ এতিয়ালৈ কোনো পৰ্য্যালোচনা দাখিল কৰা হোৱা নাই। [Your review](https://wordpress.org/support/plugin/yard-warden/reviews/#new-post) [সকলো পৰ্য্যালোচনা চাওক](https://wordpress.org/support/plugin/yard-warden/reviews/) ## অৱদানকাৰীসকল * [ Yard | Digital Agency ](https://profiles.wordpress.org/yarddigitalagency/) ## সাহায্য কিবা ক’বলগীয়া আছে? সহায় লাগে? [সাহায্যৰ ফ’ৰাম চাওক](https://wordpress.org/support/plugin/yard-warden/)