Password security

robleer

Hi,
I want to make the password a little more secure and tried this rule:

If Lenght(SystemUser.Password)<9 then REPORT ERROR 'Password to short'

The result of this rule is that the system 'flickers' a few times after entering a to short password and then stores it anyway.

Is there anyone who has put some effort in making passwords (a lot) safer than standard? Any examples?

Tia,

Rob

tford

Because the password is not stored as entered, the size is different. For example, if you add an attribute to calculate the size of the default admin pw, you will find it is larger than expected.

kklosson

I have an attribute called clearpassword. I copy the password to clearpassword as needed then clear its value. May be useful for this purpose.

tpis001

Hi.... We use regular expressions to tighten up password security. You can pretty much make it as robust as you like. Ours requires a minimum of 8 characters, with a letter, number, an uppercase and a special character.

Try googling 'reg ex password' - you'll find a fair bit.

robleer

Ok, I will check it out and thanks for your help !

Rob

RentProperty

We use the following Regular Expressions for Login Name And Password on all system users. Seems to be working quite well and forces our clients to implement some proper password security:

Login Name : /^[A-Za-z0-9_@.]{8,80}$/
THIS SPECIFIES: 8 - 80 Charachters (Alpha Numeric and Special Characters _ . @) - To allow email addresses as login names as well.

Password : /^?=.*[a-z](?=.[A-Z])(?=.\d)[A-Za-z\d!@#$%^&()-]{8,}/
THIS SPECIFIES: 1 Upper 1 Lower 1 Number (Longer than 8-), Special Charachters !@#$%^&()- are also allowed

Hope this helped. Feel free to use it!

Kind Regards

Hein

hpl123

Great stuff guys,
Thanks for sharing.