Password Policy plugin for Craft CMS 3

Enforce a password policy on your users. This plugin can also check the Have I been Pwned database to make sure users use a password that is secure.

Configuration

You can configure this plugin through the plugin settings or by adding a config/password-policy.php file:

<?php

return [
    // Minimum password length
    "minLength" => 16,
    
    // Maximum password length
    "maxLength" => 160,
    
    // Force users to use different cases
    "cases" => false,
    
    // Require at least 1 number
    "numbers" => false,
    
    // Require at least one symbol
    "symbols" => false,
    
    // Check the Have I been Pwned database
    "checkPwned" => true,
];