We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
MODX Community Forums Archive

password policy

    • 26503
    • 620 Posts
    Sean Kimball Reply #1, 14 years, 1 month ago
    is there a way to set a default password policy? it currently looks like "8 characters" ... any way to make the policy stronger?
      *** Not just websites, we also create signage, banners, print, trade show displays and more! ***

      Sean Kimball CLP, CLS.
      Technical Director / Sr. Developer | BigBlock Studios
      ._______________________________________________.
      Bigblock Studios http://www.bigblockstudios.ca Web site design & development.
      27-1300 King Street East. Box 167 Oshawa, Ontario L1H8J4 Canada.
      phone/fax: 905-426-5525
      • 28042 ☆ A M B ☆
      • 24,524 Posts
      sottwell Reply #2, 14 years ago
      If you are using Revo, go to System -> System Settings and find the password_min_length setting.
        Studying MODX in the desert - http://sottwell.com
        Tips and Tricks from the MODX Forums and Slack Channels - http://modxcookbook.com
        Join the Slack Community - http://modx.org
        • 26503
        • 620 Posts
        Sean Kimball Reply #3, 14 years ago
        Revo, yes.... but length is not enough to make strong passwords. I mean to require caps, numbers, and alpha characters possibly even limiting consecutive characters.
          *** Not just websites, we also create signage, banners, print, trade show displays and more! ***

          Sean Kimball CLP, CLS.
          Technical Director / Sr. Developer | BigBlock Studios
          ._______________________________________________.
          Bigblock Studios http://www.bigblockstudios.ca Web site design & development.
          27-1300 King Street East. Box 167 Oshawa, Ontario L1H8J4 Canada.
          phone/fax: 905-426-5525
          • 28042 ☆ A M B ☆
          • 24,524 Posts
          sottwell Reply #4, 14 years ago
          I think you would need a plugin to customize that. Here's some examples of PHP code to check passwords that you could use in the plugin http://www.cafewebmaster.com/check-password-strength-safety-php-and-regex
            Studying MODX in the desert - http://sottwell.com
            Tips and Tricks from the MODX Forums and Slack Channels - http://modxcookbook.com
            Join the Slack Community - http://modx.org
            • 22303 MODX Staff
            • 10,725 Posts
            opengeek Reply #5, 14 years ago
            Actually, if you checkout the latest release of the Login package (v1.8.1), Shaun added a feature to the Register snippet that might meet your needs:

            New in 1.8.1

            Add password strength algorithm and checking properties to Register, via &ensurePasswordStrength property
              Jason Coward
              Chief Architect @ MODX
              http://www.jasoncoward.com | http://twitter.com/drumshaman | https://github.com/opengeek
              • 26503
              • 620 Posts
              Sean Kimball Reply #6, 14 years ago
              Quote from: opengeek at Sep 25, 2012, 04:43 PM
              Actually, if you checkout the latest release of the Login package (v1.8.1), Shaun added a feature to the Register snippet that might meet your needs:

              New in 1.8.1

              Add password strength algorithm and checking properties to Register, via &ensurePasswordStrength property


              ok - good news.

              It's a start, though we will still need plugins for the manager to enforce admin users to enter/set correct passwords ~ as well as the auto-generate password feature.

              looking like a feature request to me.... wink
                *** Not just websites, we also create signage, banners, print, trade show displays and more! ***

                Sean Kimball CLP, CLS.
                Technical Director / Sr. Developer | BigBlock Studios
                ._______________________________________________.
                Bigblock Studios http://www.bigblockstudios.ca Web site design & development.
                27-1300 King Street East. Box 167 Oshawa, Ontario L1H8J4 Canada.
                phone/fax: 905-426-5525