Menu

Home › Forums › Plugin Support › Password strength

Tagged: 

Viewing 8 posts - 1 through 8 (of 8 total)
  • Author
    Posts
  • January 14, 2015 at 10:57 am #6673
    martinr
    Member

    Hey,

    is it possible to stop weak passwords by determining the minimum length?
    For example I just want to allow passwords that have at least a length of 6 characters.

    Would be even better if certain characters are required or excluded.

    Best regards

    Martin

    January 14, 2015 at 2:07 pm #6674
    kochhase63
    Member

    Hello,
    I have the same questions!!

    Best regards
    Henryk

    January 14, 2015 at 2:25 pm #6675
    martinr
    Member

    Yes, main security question!!

    January 14, 2015 at 4:16 pm #6676
    kochhase63
    Member

    Hello Khaled,

    can you input in version 1.17rc3 something like this.

    https://wordpress.org/plugins/force-strong-passwords/

    thanks,
    it is very important!

    Henryk

    January 14, 2015 at 6:55 pm #6677
    martinr
    Member

    Henryk, but I need it for 1.1.6 😉

    The best would be a function.

    it is really important!

    January 15, 2015 at 1:04 am #6680
    martinr
    Member

    Khaled,

    I can not understand why there is no response. This is a big security problem. It is possible for every one to enter a password like 1234. This is not acceptable. Please give a fast solution.

    Best regards

    January 23, 2015 at 12:51 am #6713
    Khaled
    Member

    Hi Martin and Henryk,
    This feature has been added to dev version. Fill up pattern field with relevant regex to allows only strong password. Here, you can find some useful pattern http://html5pattern.com/Passwords

    Thanks.

    January 25, 2015 at 11:01 pm #6719
    skoulix
    Member

    Hello,

    this is a great addition and very much needed, well done!

    However, the regular expression applies only for the registration form. These rules must also apply and to the reset password form.

    e.g.
    Right now we are able to force users during registration to choose a better password with regular expressions, but one can very easily bypass and choose another non-secure password via the reset password form. It doesn’t make sense.

    Can you please make possible the reset password form to also take account the regular expression that we have set to the password field?

    That would be great.

    Keep up the good work.

    • This reply was modified 9 years, 10 months ago by skoulix.
    • This reply was modified 9 years, 10 months ago by skoulix.
  • Author
    Posts
Viewing 8 posts - 1 through 8 (of 8 total)
  • You must be logged in to reply to this topic.