Password Policy

The Password Policy is implemented with password strength.

Validates the strength of a password according to several rules:

• size
• 3+ numbers
• 2+ special characters
• uppercased and downcased letters
• combination of numbers, letters and symbols
• password contains username
• sequences (123, abc, aaa)
• repetitions
• can't be a common password (view list at support/common.txt)

Some results:

• 123: weak
• 123abc: weak
• aaaaaa: weak
• myPass145: good
• myPass145$: strong

Weak:

Good:

Strong:

https://github.com/puzzle/cryptopus/blob/master/app/assets/images/strong.png