revolution
revolution copied to clipboard
Increase default minimum and generated passsword lengths
What does it do?
Increases the default minimum and generated password lengths.
Why is it needed?
The National Institute of Standards and Technology (NIST) has updated its 2025 guidelines, moving away from mandatory resets and complex character requirements towards practices like longer passwords, real-time blocklists, and Multi-Factor Authentication (MFA).
How to test
Make sure the defaults are respected if you set the values to empty strings in system settings and that new installs get the new default values.
Related issue(s)/PR(s)
Resolves #16756