Is there a way to make the password requirements more simple? It requires like 15 digits? thats tooo many! like 6 should be enough imho for my site.

Whoops found it under Admin>Settings>Users. Should I delete this question? Sorry I had searched but didn’t see it.

15 is for admins, 10 is the default for regular users. Both are configurable in the Admin > Settings area, search for password

If your site will be connected to the internet, then 6 characters is almost certainly not enough. If it requires registration,so crackers do not know usernames, that could reduce the need for complexity, but, it’s still not a good idea. See, for example [image] Your Password is Too Damn S…

curses! Ill put the default back. But doesnt gmail even allow “aaaaaaaa”? Gmail Password Requirements

If you want easy login and sign in, set up social logins, users can authenticate with Facebook, Google, Twitter, etc. No password is better than a bad password :smile:

[image] Donald_Swofford: Whoops found it under Admin>Settings>Users. Should I delete this question? Well, if you couldn’t find it among all the settings, someone else won’t either. Also, the discussion about password complexity is likely important for others as well.

[image] Donald_Swofford: Should I delete this question? Sorry I had searched but didn’t see it. It’s good to have questions asked and answered here on meta. Marking the best answer as the Solution would also be helpful.

There is also a “common password” Setting. For example, on my localhost development Discourse I have that disabled so I can use “password” as a password and not need to remember a mess of different passwords for the test accounts. But IMHO on a real live site it would be a poor idea to allow “pass…

Despite all of the evidence presented that passwords need to be long, I’m still often annoyed by the 10 character limit (especially on mobile, where typing 10 characters into a password box is a bit of a chore). SSO seems like a good option; I wonder if the ‘Sign in via email’ pattern that slack us…

You are not me. I don’t go all xkcd with the horse and the staple and whatever, but I do find multi word passwordsphrases work very well for me. Often they are word game things for me, rather than common phrases, related to the site or something at hand when creating it. For a cooking website, I mig…

Yes, but this is already possible with “forgot password”.

Is there a way to make the password requirements more simple?

Product Support

codinghorror (Jeff Atwood) March 22, 2018, 11:37am 18

Ok, this is now shipping cc @gdpelican

I don’t see it triggering here on meta though, is it incompatible with social logins or something?

Topic		Replies	Views
Min Password Length vs Block Common Passwords Feature	29	5975	August 7, 2020
How can I enforce user password complexity? Product Support	14	1674	October 27, 2022
Pwned Passwords Validator Plugin	37	5344	October 14, 2019
Requiring STRONG password for users with ADMIN privileges Product Support	4	451	April 7, 2024
Remove password security length Product Support	4	506	October 26, 2021

Is there a way to make the password requirements more simple?

Related topics