Password policy

miglius - September 25, 2006 - 05:14

This module provides a way to specify a certain level of password complexity (aka. "password hardening") for user passwords on a system by defining a password policy.

A password policy can be defined with a set of constraints which must be met before a user password change will be accepted. Each constraint has a parameter allowing for the minimum number of valid conditions which must be met before the constraint is satisfied.

Example: an uppercase constraint (with a parameter of 2) and a digit constraint (with a parameter of 4) means that a user password must have at least 2 uppercase letters and at least 4 digits for it to be accepted.

Current constraints include:

  • Digit constraint
  • Letter constraint
  • Letter/Digit constraint (Alphanumeric)
  • Length constraint
  • Uppercase constraint
  • Lowercase constraint
  • Punctuation constraint
  • History constraint (checks hashed password against a collection of users previous hashed passwords looking for recent duplicates)

The development of this module was sponsored by Bryght (http://www.bryght.com)

Releases

Official releasesDateSizeLinksStatus
6.x-1.0-alpha12008-May-1723.79 KBRecommended for 6.xThis is currently the recommended release for 6.x.
Development snapshotsDateSizeLinksStatus
6.x-1.x-dev2008-May-1723.8 KBDevelopment snapshotDevelopment snapshots are automatically regenerated and their contents can frequently change, so they are not recommended for production use.
4.7.x-1.x-dev2007-Jan-0315.75 KBDevelopment snapshotDevelopment snapshots are automatically regenerated and their contents can frequently change, so they are not recommended for production use.
 
 

Drupal is a registered trademark of Dries Buytaert.