1

You can also use front-end form validation to enforce stronger passwords than the Craft default, either with inbuilt browser functionality using the pattern attribute (more on that here) or JavaScript. It's not bulletproof by any means but it's an extra layer and it's the easiest way of implementing a stronger password policy for registering users. I've used ...


1

AFAIK, there’s no current first-party policy enforcements, but there is this plugin we’ve used in the past to make sure passwords aren’t easily guessed or previously pwned. I would give it a go in the meantime.


Only top voted, non community-wiki answers of a minimum length are eligible