Min password length

[hosna]

Why I cant reduce min password length to less than 8?

[Heather_Dudley]

Because doing so creates more insecure passwords. Short passwords are easier to crack.

[Remah (Just another happy Discourse user)]

Why do you want to have passwords of less than 8 characters?

I’m wondering if this is a problem for you because you’re trying to do something else which requires it.

[hosna]

@Heather_Dudley

Because doing so creates more insecure passwords. Short passwords are easier to crack.

Ofcourse I know this. But I think admin should be able to define whatever suits for their community.

[Remah (Just another happy Discourse user)]

This is the discussion where the 8 minimum was set:

Min Password Length vs Block Common Passwords

8 character passwords are perilously close to no password at all these days. https://blog.codinghorror.com/your-password-is-too-damn-short/ This is one of those defaults I strongly advise against changing, at least in the smaller direction. It is also quite telling how small the common password list is when you filter to 10 chars and higher. There is a reason for this…

[hosna]

@Remah

This is the discussion where the 8 minimum was set:

So is there a command line for changing it as mentioned here?

@erlend_sh

Fair point. Maybe we should make lower-than-10 impossible to do via the interface. Setting could only be changed by command line.

[Remah (Just another happy Discourse user)]

@hosna

command line for changing it as mentioned here?

No, but there should be a site setting.

You can use the search box on your Settings page to find settings by name. Entering “Min Password Length” into the search box should return the setting for you to change.

[hosna]

@Remah

No, but there should be a site setting.

I’m aware of the site setting “Min Password Length”. But its been set to minimum of 8 characters. I want to reduce it even more as pointed by @erlend_sh in the quote.

[hosna]

So isn’t there a solution to make min password length even less from shell?