The Password Control system plugin enforces password changes upon registered site users. The change can be enforced for the initial (first) connection only, and/or for periodic changing.
Optionally the users can be redirected back to the home page when a password change is enforced.
There is the ability to define 'exempt' users, i.e. users for whom the administrator does not want to enforce password changing.
The password entered by the user is checked against the previous user passwords (number is site defined) to ensure that it is changed and that the user is not reusing a password again, or just pressing the submit button without providing a new password.
One can also specify the password criteria, and incorporates an optional password generator to create passwords meeting the specified criteria.
New options also allow the forcing of a user to change their initial email address on initial login. This is suitable for use on e-commerce (Virtuemart) sites where a preassigned email address has been allocated to a user and it is desirable that they change it.