Password Policy plugin for Craft CMS 5

Enforce a password policy on your users. This plugin can also check the Have I been Pwned database to make sure users use a password that is secure.

Policy Errors: Screenshot

Password Strength Indicator Screenshot

Requirements

This plugin requires Craft CMS 5.0.0.

Installation

You can install this plugin through the plugin store.

Configuration

You can configure this plugin by adding a config/password-policy.php file:

<?php

return [
    // Minimum password length
    "minLength" => 16,
    
    // Maximum password length
    "maxLength" => 160,
    
    // Force users to use different cases
    "cases" => false,
    
    // Require at least 1 number
    "numbers" => false,
    
    // Require at least one symbol
    "symbols" => false,
    
    // Show a password strength indicator
    "showStrengthIndicator" => true,
];

Or through the plugin settings

Screenshot

Brought to you by Percipio Global Ltd.

Password Policy

Version 4.0.0-beta.1

Added

Changed