Customer Password Security Rules

Question

I would like for my customers to have to adhere to certain rules when creating an account/creating a password. These rules are for password security and are as follows:

• Greater than 8 characters
• Contains Uppercase
• Contains Lowercase
• Contains Number
• Contains a Special Character

Is there a way I can enforce this within Magento so that my customers have greater security on their accounts?

Answer 1

By default there is no way to impose passwords for customers in Magento. There are plethora of JQuery plugins if you chose to go that route.

Dropbox however has a very good Library for such:

• https://github.com/dropbox/zxcvbn
• Demo: https://dl.dropboxusercontent.com/u/209/zxcvbn/test/index.html

Also to note:

• Passwords in sign up email. Bad practice? PCI compliant?

Further reading:

• https://security.stackexchange.com/questions/51060/should-i-reject-obviously-poor-passwords