Password policy

[anlem121]

Hi,

is there a password policy for Planka?
I haven't found anything like that yet, or I have overlooked it.

Thank you very much.

[seals187]

Hi Anlem,

I dont think so that there are any password policies in PLANKA until now.
You could activate the OIDC integration in PLANKA, because your OIDC Provider could have that pwd-policy you want.

best regards
seals187

[meltyshev]

Just a quick update: there is a password strength check in place when creating a new user or changing the password for an existing user. We use https://github.com/dropbox/zxcvbn to evaluate password strength. The current minimum strength score is set to 2, which indicates "somewhat guessable: protection from unthrottled online attacks. (guesses < 10^8)".

[seals187]

perfect, thanks for the input =)

[anlem121]

Hi meltyshev,

thank you for your answer. That helps me a little.
Do you know whether there will be any adjustments in this direction in the near future, e.g. even stricter guidelines (min. 8 characters etc.)?