Best have-i-been-pwned plugins for WordPress
The most popular have-i-been-pwned plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Passwords Evolved leads with 400+ active installs, ahead of Disallow Pwned Password (10+). All 2 plugins tagged “have-i-been-pwned” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 2 have-i-been-pwned plugins
- 1.
Passwords EvolvedThe most installed have-i-been-pwned plugin, with 400+ active installs. Only 2 reviews so far, last updated 1 year ago. Tested only up to WordPress 6.8.0.
- 2.
Disallow Pwned Password10+ active installs. Only 2 reviews so far, last updated 7 years ago. Tested only up to WordPress 5.0.31.
All 2 plugins tagged “have-i-been-pwned”
Passwords Evolved
Down in the last 7 days:309#9,571by Carl Alexander1 year ago
A reimagining of WordPress authentication using modern security practices.
- Installs
- 400+
- Rating
- 5.0(2)
- Downloads
- 22/day
Disallow Pwned Password
Up in the last 7 days:2,179#38,357by Itineris Limited7 years ago
Disallow WordPress and WooCommerce users using pwned passwords.
- Installs
- 10+
- Rating
- 5.0(2)
- Downloads
- 1/day