Thread

We have an EE install with 20 or so members with control panel access. We’d like to start requiring strong passwords (by enabling “Require Strong Passwords” under Security and Session Preferences). After we make this change, will existing users be forced to upgrade their passwords next time they log in? Or will we have to get them to update passwords manually?

Thanks in advance.

That will only affect newly created passwords, yes. There is no way to tell from the hashed password how “strong” the original was.