Set password complexity
- Thread starter Shamil
- Start date
As said, in some situations this is very desirable.
My father is newer to the internet than I, but uses many web applications in which there is a password complexity requirement. I have to say, his password choices are much more secure than mine at the moment.
Having a system where the software pre-populates or suggests passwords might be OTT, but also, I never remember those. Sticking 123, although undesirable, is still better than having no numbers there at all. In this instance, the browser mechanism would allow for the password to be saved anyway.
My father is newer to the internet than I, but uses many web applications in which there is a password complexity requirement. I have to say, his password choices are much more secure than mine at the moment.
Having a system where the software pre-populates or suggests passwords might be OTT, but also, I never remember those. Sticking 123, although undesirable, is still better than having no numbers there at all. In this instance, the browser mechanism would allow for the password to be saved anyway.
A bump for interest. I'd like to see some type of minimal password complexity check as well in XF. Even if it doesn't enforce a PW complexity it would be nice to at least give an alert to the user when they are setting their password as to whether it is a considered a weak PW or not.
Now THIS I could get behind. I do like the little popups that tell me I'm insane when setting passwords.
It should be noted that complex passwords are never the answer. Pass phrases are much more difficult to guess and are much easier to remember by users.
Sites that require a convoluted mix of alphanumeric characters rarely get a repeat visit from me. The thinking that these types of passwords are "all that" is totally out of whack when dealing with users and making things easy AND secure for them.
https://xkcd.com/936/
Sites that require a convoluted mix of alphanumeric characters rarely get a repeat visit from me. The thinking that these types of passwords are "all that" is totally out of whack when dealing with users and making things easy AND secure for them.
https://xkcd.com/936/
Good article here from Jeff Atwood, one of the Discourse coders on some research he's carried out while improving their login amd registration system
https://blog.codinghorror.com/password-rules-are-********/
Better password generation guidance would be nice. Currently using an add on to increase the length requirement
https://blog.codinghorror.com/password-rules-are-********/
Better password generation guidance would be nice. Currently using an add on to increase the length requirement
