[wp-hackers] Default password length

[Callum Macdonald]

Ok, great. I'd support switching it to 8 characters by default.

While I know that some people will change their passwords, I also know 
that a lot of users simply won't. Personally, I don't bother generating 
new passwords when I create test sites because it's more hassle than 
it's worth for a testing site.

Changing the options via a plugin is fine for users updating their 
passwords, but doesn't work for the first admin password when the site 
is installed.

Cheers - Callum.

James Davis wrote:
> Callum Macdonald wrote:
>
>> I install a lot of WordPress sites, mainly for testing, and I notice 
>> that the passwords are predominantly numbers and only 6 digits long. 
>> As part of the password handling changes, can we push that out to 8 
>> characters and improve the random algorithm?
>
> The password generation function has been updated in trunk, although 
> it still defaults to six characters length. The password generation 
> function can be changed using a plugin if you wish.
>
> See http://trac.wordpress.org/ticket/5401
>
> James
>