[buddypress-trac] [BuddyPress Trac] #8589: Enforce strong passwords within user profile settings

buddypress-trac noreply at wordpress.org
Tue Dec 7 20:21:13 UTC 2021


#8589: Enforce strong passwords within user profile settings
-----------------------------------+-----------------------
 Reporter:  niftythree             |       Owner:  imath
     Type:  enhancement            |      Status:  assigned
 Priority:  normal                 |   Milestone:  10.0.0
Component:  Templates              |     Version:
 Severity:  normal                 |  Resolution:
 Keywords:  has-patch 2nd-opinion  |
-----------------------------------+-----------------------

Comment (by dcavins):

 @imath I think this is a great change. I've tested it out with Legacy and
 Nouveau and it works as expected. My only suggestion is that
 `bp_members_user_pass_required_strength_description()` shouldn't try to
 describe the strength required, but should show what characters are
 required, for instance. "Your password must be weak at least to be allowed
 on this site." doesn't inspire much confidence. :)

 I'm sure that the password strength-o-meter isn't this obvious, but for
 level 1, could we say "Use a mix of upper- and lowercase letters." and so
 on? If not, I'd suggest we just offer solid password advice, regardless of
 the level selected, like "Strong passwords are made up of upper- and
 lowercase letters, numbers and special characters. Longer passwords are
 generally stronger."

-- 
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/8589#comment:5>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list