Forums » SEPHP Help and Tips

Password Improvements in 4.10.5

    • 13 posts
    December 10, 2019 9:21 AM EST

    I noticed that password requirements have changed, asking for upper and lower case, etc.

    Is there a way to modify the minimum requirements as an example not to use special caracters? I don't have real access issue at this time, asking for a more secure password from my users will only cause an increased level of support for me.

    in the release information, it is said "Require Password Reset - A setting to allow admin to require a password reset and set the days until a reset is required." Where can I find these password related parameters?


    • Moderator
    • 4676 posts
    December 11, 2019 6:42 AM EST

    This was changed due to a security audit. You would need a customization in order to change it back to the less secure methods but doing so can lead your users to get hacked as most these days move towards security.

    For the setting to require password reset, it'll be found in Settings > General Settings and I've added updating the tutorial to add this as I see we missed adding this to it. 

    • 6 posts
    May 19, 2020 8:32 AM EDT

    Yes I agree that the Password strength makes it a little more awkward for new members to sign up. I feel that the password strength should be an option so that members can use an easier to remember password.

    I feel this may put members off signing up if they choose a password that does not conform they may give up!!!