Hi
How do I setup additional password complexity, so that I can block passwords that are similar to passwords listed in the blacklist in RDM?
Fx if password123 is blacklisted, it would be nice that users are not allowed to use similar passwords .... fx password1234.
In the RDM password analyzer password123 is shown as forbiden, but password1234 is shown as a "Strong".
Is it possible to make such a setup ?
Hi,
For now it's not possible to do in our system. The only thing we could do is not allow the the forbidden password as a content of a new password. Do you think it could help?
David Hervieux
Hi
That would help :-)
Is that an option now ?
Hi,
It's not possible for now but that's something we could add in a future version.
Regards
David Hervieux
Hello,
We will have a new feature in the next beta for specifying forbidden passwords which will work alongside password complexities. So, if you have a password complexity set in an entry, the forbidden passwords will be taken into consideration.
You will be able to set them in the datasource settings in the "forbidden password" tab. The settings will include:
- The value: the password you want to forbid
- If it is case sensitive: if PaSsWoRd123 is the same as password123
- The verification mode
I think this should help you in your use case.
Regards,
Hubert Mireault