Password strength

[martinr]

Hey,

is it possible to stop weak passwords by determining the minimum length?
For example I just want to allow passwords that have at least a length of 6 characters.

Would be even better if certain characters are required or excluded.

Best regards

Martin

[kochhase63]

Hello,
I have the same questions!!

Best regards
Henryk

[martinr]

Yes, main security question!!

[kochhase63]

Hello Khaled,

can you input in version 1.17rc3 something like this.

https://wordpress.org/plugins/force-strong-passwords/

thanks,
it is very important!

Henryk

[martinr]

Henryk, but I need it for 1.1.6 😉

The best would be a function.

it is really important!

[martinr]

Khaled,

I can not understand why there is no response. This is a big security problem. It is possible for every one to enter a password like 1234. This is not acceptable. Please give a fast solution.

Best regards

[Khaled]

Hi Martin and Henryk,
This feature has been added to dev version. Fill up pattern field with relevant regex to allows only strong password. Here, you can find some useful pattern http://html5pattern.com/Passwords

Thanks.

[skoulix]

Hello,

this is a great addition and very much needed, well done!

However, the regular expression applies only for the registration form. These rules must also apply and to the reset password form.

e.g.
Right now we are able to force users during registration to choose a better password with regular expressions, but one can very easily bypass and choose another non-secure password via the reset password form. It doesn’t make sense.

Can you please make possible the reset password form to also take account the regular expression that we have set to the password field?

That would be great.

Keep up the good work.

• This reply was modified 9 years, 2 months ago by skoulix.
• This reply was modified 9 years, 2 months ago by skoulix.

[Author]

Posts