From the course: Web Security: User Authentication and Access Control
Unlock the full course today
Join today to access over 24,700 courses taught by industry experts.
Password requirements
From the course: Web Security: User Authentication and Access Control
Password requirements
- [Instructor] In this chapter, we will consider how to manage user passwords over time, and we'll begin by discussing password requirements. In the last chapter, we discussed what it takes to have a strong password, and I hope that you'll choose strong passwords for yourself that are long, random, unique, and have a variety of characters. But how do we get website users to pick strong passwords too? We can educate users about the importance of strong passwords, and we should definitely do that, but more effectively, we can impose password requirements whenever a user sets a password. We should require users to pick passwords with a minimum number of characters. I think the minimum length you should require is 10 characters, but I recommend 15 characters. It's important not to limit the length of passwords. Let users submit longer passwords if they want to. Longer passwords are awesome. Most hashing algorithms also don't…