authelia/docs/features/password-policy.md
Manuel Nuñez 8659ba394d
feat(authentication): password policy (#2723)
Implement a password policy with visual feedback in the web portal.

Co-authored-by: Manuel Nuñez <@mind-ar>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-03 08:32:57 +10:00

37 lines
976 B
Markdown

---
layout: default
title: Password Policy
parent: Features
nav_order: 8
---
# Password Policy
Password policy enforces the security by requering the users to use strong passwords
Currently, two methods are supported:
## classic
* this mode of operation allows administrators to set the rules that user passwords must comply with
* the available options are:
* Minimum password length
* Require Uppercase
* Require Lowercase
* Require Numbers
* Require Special characters
* when changing the password users must meet these rules
<p align="center">
<img src="../images/password-policy-classic-1.png" width="400">
</p>
## zxcvbn
* this mode uses zxcvbn for password strength checking (see: https://github.com/dropbox/zxcvbn)
* in this mode of operation, the user is not forced to follow any rules. the user is notified if their passwords is weak or strong
<p align="center">
<img src="../images/password-policy-zxcvbn-1.png" width="400">
</p>