Is there a way for Discourse to require users with ADMIN privileges to use STRONG passwords? This of course to prevent someone from hacking and messing with the core setup of our sites. Mark Ben’s Friends Rare Disease

There is the min admin password length setting (default 15) which forces admins to choose longer passwords than regular users. All users have to use at least the configured number of password unique characters (default 6) and the 10 000 most popular passwords are blocked by default [1] . For additio…

I would encourage/educate them to use Passkeys instead. They are safer and easier to use than passwords.

In addition to the above excellent suggestions, I would also recommend using complex passwords and storing them in a password vault to manage passwords and passkeys.

You can also force two factor for admins

فرض كلمة مرور قوية للمستخدمين ذوي صلاحيات ADMIN

الدعم

pfaffman (Jay Pfaffman) 7 أبريل 2024، 2:29م 5

يمكنك أيضًا فرض المصادقة الثنائية للمسؤولين

الموضوع		الردود	مرات العرض
How can I enforce user password complexity? Support	15	1389	26 نوفمبر 2022
Remove password security length Support	4	465	26 أكتوبر 2021
Requiring password before admin actions can be taken Feature	4	1764	26 فبراير 2018
Is there a way to make the password requirements more simple? Support	19	4800	8 يونيو 2024
What to do if your Discourse is compromised Self-Hosting reference	0	10371	24 فبراير 2016

فرض كلمة مرور قوية للمستخدمين ذوي صلاحيات ADMIN

الموضوعات ذات الصلة