Guardian

Guardian forces specified Users a.k.a. 'guarded users' to log in with only
drush uli [uid] or password reset token url. In this way there will be
no need to store and share complex passwords within your organization in a
secure environment. To secure this setup, any account details of the
'guarded user' will be protected against changes and if needed restored to its
default state.

Difference between 7.x-1.x and 8.x-1.x

In D8, multiple users can be guarded by Guardian.
For D7 this is still in progress, see 7.x-1.4-rc1

GitHub / Pull requests

A GitHub clone can be found at: https://github.com/TessaBakker/guardian