New answers tagged password
0
You can add additional password complexity/requirement logic with a custom plugin/module by listening to the EVENT_BEFORE_VALIDATE on the User class.
There is an example of that for Craft 3 here: https://craftcms.stackexchange.com/a/12166/57
1
You can also use front-end form validation to enforce stronger passwords than the Craft default, either with inbuilt browser functionality using the pattern attribute (more on that here) or JavaScript. It's not bulletproof by any means but it's an extra layer and it's the easiest way of implementing a stronger password policy for registering users.
I've used ...
1
AFAIK, there’s no current first-party policy enforcements, but there is this plugin we’ve used in the past to make sure passwords aren’t easily guessed or previously pwned. I would give it a go in the meantime.
Top 50 recent answers are included
