Password policy

Is there a way to change the password policy, as far as how many chr the password has to be etc..

You may try this in the web.config file (web folder). In fact, I have not try it myself to see if it really works. Please try and tell your results.

<membership userIsOnlineTimeWindow="15" >
            <providers>
                <add
                    name="CommunityServerSqlProvider"            
                    type="CommunityServer.MemberRole.CSMembershipProvider, CommunityServer.MemberRole"
                    connectionStringName="SiteSqlServer"
                    enablePasswordRetrieval="false"
                    enablePasswordReset="true"
                    requiresQuestionAndAnswer="false"
                    requiresUniqueEmail="true"
                    passwordFormat="Hashed"
                    applicationName="dev"
                    description="Stores and retrieves membership data from the local Microsoft SQL Server database"
                    maxInvalidPasswordAttempts = "999"
                    passwordAttemptWindow = "999"
                    minRequiredPasswordLength = "6"
                    minRequiredNonalphanumericCharacters = "0"
                />
            </providers>
        </membership>

Could go to the Control Panel, go to Administration, Membership, and Registration Settings.

ken:

Could go to the Control Panel, go to Administration, Membership, and Registration Settings.

I see this " (.*) " under Password Regular Expression Pattern. Can You give us some exemple of strong  password policy (min. 8 chars +number and chars+one specila character)

Thx

Here is one that requires password to be at least 8 characters and have a digit, lower case, upper case, and special character.

^(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*\W).{8,}$

 

joswalt:

Here is one that requires password to be at least 8 characters and have a digit, lower case, upper case, and special character.

^(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*\W).{8,}$

Thank you

Does this work for you? I was trying to do the same and I am getting the error "

Password contains invalid chars ..." while new user registration.

I also get this same invalid character error when using the above regex.