Password rules on cloud

[krebil]

Issue description

I was told by the cloud support team that it was not possible to override Umbraco ID's default password rules. I have a project where they would like longer required passwords.

On https://umbraco.com/about-us/trust-center/security-and-umbraco/security-and-umbraco-cloud/ it says that setting up password rules are supported.

8 - 100 characters are not specific enough for us, I would love to require a lowercase letter, uppercase letter, number & special characters (maybe even bump the password length to ~12 characters).

At the moment aaaaaaaa is a valid password and I don't trust my editors not to use it.

[sajumb]

Hi @krebil, Thank you for your comments. You are absolutely right that we currently don't offer the possibility to set up specific password rules in Umbraco Cloud. We will be sure to remove it from the trust center page asap.

Regarding password strength, we are planning to implement a stronger password policy in Umbraco Cloud to enhance security even more.

[krebil]

@sajumb That sounds great, let me know if there is anything I can do to help.