Suggestion: Enforce strong passwords

Open andre-doersch opened this issue 5 years ago • 2 comments

Hey 👋 , I'm a little unhappy with the password strength. Currently it is possible to create users with a single character password. This is unfortunately totally insecure and not best practice. I would recommend or suggest that the password: Must be at least seven characters long. Must contain both numeric and alphabetic characters. Must be different from previous passwords. Maybe you could also think about some kind of password expiry.

Jun 19 '20 11:06 andre-doersch

Thanks for your feedback! I think it would be indeed a good enhancement. 🙂

Jun 19 '20 20:06 marcantondahmen

This can now be configured in version 2.

Feb 25 '24 21:02 marcantondahmen