Password Improvements in 4.10.5

  • December 10, 2019 9:21 AM EST

    I noticed that password requirements have changed, asking for upper and lower case, etc.

    Is there a way to modify the minimum requirements as an example not to use special caracters? I don't have real access issue at this time, asking for a more secure password from my users will only cause an increased level of support for me.

    in the release information, it is said "Require Password Reset - A setting to allow admin to require a password reset and set the days until a reset is required." Where can I find these password related parameters?


    • Moderator
    • 6892 posts
    December 11, 2019 6:42 AM EST

    This was changed due to a security audit. You would need a customization in order to change it back to the less secure methods but doing so can lead your users to get hacked as most these days move towards security.

    For the setting to require password reset, it'll be found in Settings > General Settings and I've added updating the tutorial to add this as I see we missed adding this to it. 

    • 45 posts
    May 19, 2020 8:32 AM EDT

    Yes I agree that the Password strength makes it a little more awkward for new members to sign up. I feel that the password strength should be an option so that members can use an easier to remember password.

    I feel this may put members off signing up if they choose a password that does not conform they may give up!!!

    • 18 posts
    June 14, 2020 6:59 PM EDT

    Yup this is something that I face issues with also. When the password requirements are too stringent, it may put off some users when they are signing up

    • 50 posts
    June 17, 2020 4:31 PM EDT

    I agree with you, password strength for some of my new member hard to signup

    May be if the password  contain one upper and one lower case letter, one number can be easier for new member to remember and create

  • July 26, 2020 5:04 PM EDT

    A day after my official launch, my users are also having challenges with the special character requirement. Has anybody found a mod to change this requirement?

    • 261 posts
    July 26, 2020 6:34 PM EDT


    See my post here for where to start looking. It is not tested though. If you only want to remove the special character requirement, only remove the javascript and edit the regular expression check specifically for them.


    SocialEngine do not support source modifications.