Xaisoft
Xaisoft

Reputation: 46651

ASP.NET Membership Password?

If I require a password to be between 7 and 16 characters and contain at least 1 numeric password and then send a temporary password that contains no numeric characters and % signs and the ^ sign, will the password fail?

Upvotes: 1

Views: 470

Answers (4)

user59861
user59861

Reputation:

You'll be fine. It only checks the complexity when you change it.

Upvotes: 1

John
John

Reputation: 5834

I suggest creating all temporary passwords to match the password complexity rules.

However the rules are only enforced when the password is changed, not when you log in.

The percent symbol shouldn't be used just in case it's misinterpreted as escaped hex.

Upvotes: 0

CheGueVerra
CheGueVerra

Reputation: 7983

IIRC, the temporary password will follow the rules that you have establish. I would use the MembershipUser method: ResetPassword, to create all temporary passwords for the users.

Upvotes: 0

DCNYAM
DCNYAM

Reputation: 12126

I do not believe so. The check for password complexity requirements should only occur when the password is created or changed.

Upvotes: 0

Related Questions