Password security verification

Get help from other users here.

Moderators: Developer, Contributor

Post Reply
iame
Posts: 9
Joined: 01 Sep 2023, 02:00

Password security verification

Post by iame »

Regarding password security verification, is it possible for us to check password strength?
We want to prevent users from setting weak passwords, such as: !QAZ2wsx (the first two lines of characters on the keyboard)
Thanks.
atrol
Site Admin
Posts: 8270
Joined: 26 Mar 2008, 21:37
Location: Germany

Re: Password security verification

Post by atrol »

This funtionality is not available out of the box, see https://www.mantisbt.org/bugs/view.php?id=10318
Please use Search before posting and read the Manual
cas
Posts: 1514
Joined: 11 Mar 2006, 16:08
Contact:

Re: Password security verification

Post by cas »

There is a plugin available, https://github.com/ryltar/Password-strength
I have not tesxted this but is may serve your request :mrgreen:
iame
Posts: 9
Joined: 01 Sep 2023, 02:00

Re: Password security verification

Post by iame »

iame wrote: 03 Oct 2023, 08:38 Regarding password security verification, is it possible for us to check password strength?
We want to prevent users from setting weak passwords, such as: !QAZ2wsx (the first two lines of characters on the keyboard)
Thanks.
Hi cas
Thank you for your reply. We have used a similar setting to require users to set a more complex password, but some people will always set a simple password, but the password still complies with the rules, for example, the first two rows of the keyboard: !QAZ2wsx



Must contain at least 8 characters
Must contain at least one uppercase letter
Must contain at least one lowercase letter
Must contain at least one number
Must contain at least one special character
iame
Posts: 9
Joined: 01 Sep 2023, 02:00

Re: Password security verification

Post by iame »

atrol wrote: 03 Oct 2023, 09:41 This funtionality is not available out of the box, see https://www.mantisbt.org/bugs/view.php?id=10318
Hi atrol
Thank you for your reply. We have used a similar setting to require users to set a more complex password, but some people will always set a simple password, even the password still complies with the rules :( (for example, the first two rows of the keyboard: !QAZ2wsx)
Must contain at least 8 characters
Must contain at least one uppercase letter
Must contain at least one lowercase letter
Must contain at least one number
Must contain at least one special character
cas
Posts: 1514
Joined: 11 Mar 2006, 16:08
Contact:

Re: Password security verification

Post by cas »

What you then can try is to extend the existing plugin with checking a table which holds the "weak" passwords.
iame
Posts: 9
Joined: 01 Sep 2023, 02:00

Re: Password security verification

Post by iame »

cas wrote: 11 Oct 2023, 06:05 What you then can try is to extend the existing plugin with checking a table which holds the "weak" passwords.

It sounds good, we will study in this direction, thank you for your advice. :D
Post Reply