Password policy

User password is evaluated by password strength meter and get assigned a level of a strength.

Password strength level

Too short

0

Password is too short when shorter than 8 characters.

Weak password

1

Password is weak when contains minimum

  • 8 characters in length

Good password

2

Password is good when contains minimum

  • 8 characters in length
  • 1 uppercase letter
  • 1 lowercase letter
  • 1 number or 1 symbol

Strong password

3

Password is strong when contains minimum

  • 10 characters in length
  • 1 uppercase letter
  • 1 lowercase letter
  • 1 number
  • 1 symbol

Very strong password

4

Password is very strong when contains minimum

  • 12 characters in length
  • 1 uppercase letter
  • 1 lowercase letter
  • 1 number
  • 1 symbol
and does not contain any of these
  • consecutive identical characters (aaa, 111)
  • fragments from alphabet (klmn, abcd, 1234)
  • similar fragments from user email (password may not contain john if user's email is john.sample@company.com)
  • fragments from keyboard (qwert, zxcv, ghjk)