Is there any way to enforce password policies in SilverStripe?
We've moved the forum!
Please use forum.silverstripe.org for any new questions
(announcement).
The forum archive will stick around, but will be read only.
You can also use our Slack channel
or StackOverflow to ask for help.
Check out our community overview for more options to contribute.
I assume you mean like minimum length, special characters must be used, must change password each month sort of thing? Nothing in the core for this is the short answer but you could quite easily write your own authenticator subclass (http://api.silverstripe.org/2.4/sapphire/security/Authenticator.html) to check for what rules you want.
Actually there is support in the core via the PasswordValidator class - see http://api.silverstripe.org/2.4/sapphire/security/PasswordValidator.html.
Thank you for the reply.
This requirement has been pushed out but I'll post my findings as soon as I get back to it.
Thanks once again,
