It should be documented that enforcing such a policy is only good from a technical standpoint, you are likely to end up with a situation where the users write down their super secure and super impossible to remember passwords. Help texts on how can you memorize such things (like shifting a word one row up the keyboard and so on) and maybe linking supergenpass.com might help.

Comments

miglius’s picture

miglius commented

This module is for those websites which have to apply and enforce some password strength rules to the website. Easy to remember passwords usually are week and contradict the policy of using higher strength passwords.

Anyway there is always a password reset form in case the password is forgotten.

deekayen’s picture

deekayen commented
Status: Active » Fixed

I added a security note about creating additional operation policies beyond just using this module in README.txt.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.