Min password length

AI-generated summary

The discussion revolves around the minimum password length setting in Discourse. hosna wants to reduce the minimum password length to less than 8 characters but cannot do so. Heather_Dudley explains that shorter passwords are easier to crack, making them insecure. hosna acknowledges this but believes the admin should be able to define the minimum length.

Remah shares a link to the discussion where the 8-character minimum was set. hosna asks if there’s a command line to change the setting, referencing a quote from erlend_sh suggesting that the setting could only be changed by command line.

Remah informs hosna that there is no command line to change the setting, but rather a site setting that can be found by searching “Min Password Length” in the Settings page. However, hosna is aware of this setting but wants to reduce the minimum length further. hosna asks if there’s a solution to reduce the minimum password length even further from the shell.

Why I cant reduce min password length to less than 8? :thinking:

Because doing so creates more insecure passwords. Short passwords are easier to crack.

Why do you want to have passwords of less than 8 characters?

I’m wondering if this is a problem for you because you’re trying to do something else which requires it.

Ofcourse I know this. But I think admin should be able to define whatever suits for their community.

This is the discussion where the 8 minimum was set:

So is there a command line for changing it as mentioned here?

No, but there should be a site setting.

You can use the search box on your Settings page to find settings by name. Entering “Min Password Length” into the search box should return the setting for you to change.

I’m aware of the site setting “Min Password Length”. But its been set to minimum of 8 characters. I want to reduce it even more as pointed by @erlend_sh in the quote.

So isn’t there a solution to make min password length even less from shell? :thinking: