Title Status Priority Category Version Component Replies Last updated Assigned to Created Scoresort ascending
Users could not find the Change password fields Needs work Normal Bug report main user.module 205 2 years 2 months 14 years 8 months 67.456
Replace confirm password element with a new element that allows toggling to view the typed password Needs work Normal Task main forms system 299 3 weeks 1 day 11 years 10 months 52.595
Password suggestions are hidden from screenreaders Needs work Normal Bug report main user system 31 1 year 1 month 4 years 3 weeks 43.678
Include fields for resetting password on the one-time password reset page Active Major Feature request main user system 112 4 months 1 week 19 years 9 months 43.482
Allow password on registration without disabling e-mail verification Needs work Normal Feature request main user.module 221 5 months 1 week 19 years 2 months 38.605
Require a (configurable) minimum password length for user accounts Active Major Feature request main user system 128 3 years 10 months 13 years 6 months 34.036999999999999
Allow the user edit form to only ask for the current password when necessary (in a followup confirmation step) Active Normal Task main user system 39 11 months 3 weeks 16 years 7 months 29.735
Check for common words in password strength indicators Needs work Normal Task main user.module 122 10 months 4 weeks 14 years 1 month 29.010999999999999
Preserve destination parameter across password reset worklow Active Normal Feature request main user.module 15 4 months 1 week 2 years 11 months 28.551
Improve Password Field Arrangement on User Profile Page Needs work Normal Feature request main other 13 1 year 5 days 1 year 1 month 27.25
Password length is 128 but error message says it is 255 Needs work Normal Bug report main user system 32 3 years 3 months 5 years 10 months 26.509
Don't trim whitespace when setting user password Needs work Normal Bug report main user.module 43 7 months 5 days 13 years 2 months 26.088999999999999
Error highlighting and reporting problems for the current password on the user profile form Needs work Normal Bug report main user.module 78 3 years 3 months 11 years 1 month 26.081
Allow password reset on account with the username matching another email; prevent registrations that match another account Needs work Normal Bug report main user.module 289 11 months 4 weeks 14 years 4 months 25.181
Add [current-request:*] tokens Active Normal Feature request main token system 9 5 years 11 months 5 years 11 months 25
Support passkey and any other login flow that is more than username+password Active Major Feature request main user.module 6 1 year 1 month 1 year 5 months 19.716
Multiple errors in PasswordItem::preSave(), leads to data loss if field is translatable Needs work Normal Bug report main field system 53 2 years 3 weeks 10 years 10 months 19.532
Error class is set to wrong password element in accounts form. Needs work Normal Bug report main user.module 19 2 years 4 months 2 years 5 months 18.718
Include length in password strength evaluation Needs review Normal Task main user system 46 1 month 12 hours 16 years 11 months 18.421
Settings.php $databases example improvement Needs work Minor Task main install system 97 3 years 2 months 16 years 2 months 18.165
Installer does not pick up password value from settings.php when hash_salt is not pre-populated Active Normal Bug report main install system 14 3 months 4 weeks 5 years 2 months 17.857
Prevent empty passwords being stored Needs work Normal Feature request main user system 6 1 week 6 days 3 weeks 2 days 16.4
Provide a standard mechanism to determine whether a user's password can be reset. Needs work Normal Feature request main user.module 30 2 years 7 months 9 years 2 months 15.5
AJAX forms should submit to $form['#action'] instead of <current> Active Major Bug report main ajax system 58 5 months 2 weeks 10 years 10 months 15.394
"A client error happened" on Forget password due to malicious request attempt to a Drupal-based website and response is getting cached Needs work Major Bug report main user system 41 1 month 1 week 1 year 10 months 14.852
Provide option to disable password recovery by e-mail Needs work Normal Feature request main user.module 67 5 months 2 days 11 years 6 months 14.314
Password reset invalid mail notify language Needs work Normal Bug report main language system 51 8 months 3 weeks 4 years 1 month 13.878
Facilitate 2FA+MultiFactor compatibility (2FA/two-factor -> MFA/multi-factor) Active Major Feature request main user system 16 4 months 4 days 8 years 8 months 13.156
Split up and change "User name and password" field Active Normal Feature request main user.module 21 1 month 1 week 14 years 10 months 13
Clear text submission of password vulnerability Postponed (maintainer needs more info) Major Feature request main user.module 9 9 months 2 days 1 year 6 months 12.895
[meta] Update the user-edit pages Active Normal Task main user.module 7 11 months 5 hours 4 years 4 months 12.297
Only apply ProtectedUserFieldConstraintValidator when authenticated using Cookie AuthenticationProvider Needs work Normal Feature request main user.module 24 6 years 8 months 6 years 9 months 12.090999999999999
Allow providing default value for the Password form field type Active Normal Feature request main forms system 3 1 year 2 days 1 year 3 months 11.5
Password reset link should immediately detect if the link is expired Needs work Minor Task main user system 56 5 years 10 months 6 years 10 months 11.198
Set "Referrer-Policy" header to prevent leaking secret tokens in URLs Needs work Normal Feature request main base system 52 1 month 1 day 7 years 3 months 10.714
Use email verification when changing user email addresses Needs work Major Feature request main user.module 462 4 weeks 21 hours 19 years 7 months 9.761
Allow attributes to be passed to the password confirm fields Needs work Normal Bug report main forms system 57 8 months 1 week 6 years 7 months 9.543
Move the request for current password on email/password change to a modal dialog. Active Normal Feature request main ajax system 17 2 years 11 months 13 years 4 months 9.5
[Regression] login link has no destination=drupalSettings.path, so dumps you on the profile Needs work Normal Bug report main user.module 161 2 years 10 months 10 years 6 months 8.653
Remove one-time login link from default 'Welcome (no approval required)' email Active Normal Task main user system 8 5 years 4 days 5 years 2 months 8
Limit password reset per role Postponed (maintainer needs more info) Normal Feature request main user.module 25 7 months 1 week 16 years 4 months 8
[meta] Major issue triage Active Normal Plan main other 140 2 years 3 days 11 years 6 days 7.795
Apply formatters and widgets to User base fields 'name' and 'email' Needs work Major Task main user.module 103 3 years 5 months 12 years 4 weeks 7.713
[META] Adopt the symfony mailer component Needs review Normal Plan main mail system 134 10 months 3 weeks 13 years 6 months 7.649
Field storage config entities 'indexes' key Needs work Normal Bug report main field system 37 3 years 5 months 15 years 6 months 7.486
Protect initial login link against abuse and username leaking Needs work Normal Feature request main user system 45 4 months 1 week 6 years 4 months 7.018
trim(): Passing null to parameter #1 of type string is deprecated Needs work Normal Bug report main user system 7 3 years 2 months 3 years 2 months 6.942
Requirements and strategy for Core Mailer Active Normal Plan main base system 57 7 months 1 week 9 months 3 weeks 6.754
Reduce number of password hashing iterations in all tests to improve test performance Needs work Normal Task main simpletest.module 66 1 year 6 days 12 years 3 months 6.435
Security: The "administer users" permission exposes user/1 Postponed (maintainer needs more info) Normal Feature request main user system 55 6 months 2 weeks 20 years 4 months 6.348
Subscribe with RSS Subscribe to Issues for Drupal core