Enforce strong password policy #21

Closed
opened 2021-08-16 19:16:43 +00:00 by a · 7 comments
Owner

One of the obvious ways to improve our security is to enforce a strong password policy, which is also recommended by #20 here. Maybe think about this issue when addressing #14.

One of the obvious ways to improve our security is to enforce a strong password policy, which is also recommended by #20 [here](https://wiki.archlinux.org/title/Security#Enforcing_strong_passwords_with_pam_pwquality). Maybe think about this issue when addressing #14.
a added the
security
label 2021-08-16 19:16:43 +00:00
a added this to the (deleted) project 2021-08-16 19:16:43 +00:00
Author
Owner

We're in the process of first getting everyone to change their password from the default...

We're in the process of first getting everyone to change their password from the default...
a added this to the v2.0 milestone 2021-08-19 19:50:28 +00:00
Author
Owner

Only four more people that still need to change their passwords...

Only four more people that still need to change their passwords...
Author
Owner

We now generate random passwords for new users so this is less of an issue.

We now generate random passwords for new users so this is less of an issue.
Author
Owner

Closing this for now since I'm in favor of having less restrictions on users such as password policies. Just please don't use bad passwords.

Closing this for now since I'm in favor of having less restrictions on users such as password policies. Just please don't use bad passwords.
a closed this issue 2021-08-20 22:13:29 +00:00
Author
Owner

I just generated random passwords for the people who still haven't changed their passwords from the default, so this should be completely fixed now.

I just generated random passwords for the people who still haven't changed their passwords from the default, so this should be completely fixed now.
Author
Owner

The biggest issue is just that people probably have pretty weak passwords, so this is worth looking into again.

The biggest issue is just that people probably have pretty weak passwords, so this is worth looking into again.
a reopened this issue 2021-10-30 03:37:34 +00:00
a modified the milestone from v2.0 to v5.0 2021-10-31 15:17:55 +00:00
a added the
wontfix
label 2021-11-03 00:34:26 +00:00
Author
Owner

This might be worth looking into later, but not now.

This might be worth looking into later, but not now.
a closed this issue 2021-11-03 00:34:38 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: exozyme/exozyme#21
No description provided.