Reputation: 46651
If I require a password to be between 7 and 16 characters and contain at least 1 numeric password and then send a temporary password that contains no numeric characters and % signs and the ^ sign, will the password fail?
Upvotes: 1
Views: 470
Reputation: 5834
I suggest creating all temporary passwords to match the password complexity rules.
However the rules are only enforced when the password is changed, not when you log in.
The percent symbol shouldn't be used just in case it's misinterpreted as escaped hex.
Upvotes: 0
Reputation: 7983
IIRC, the temporary password will follow the rules that you have establish. I would use the MembershipUser method: ResetPassword, to create all temporary passwords for the users.
Upvotes: 0
Reputation: 12126
I do not believe so. The check for password complexity requirements should only occur when the password is created or changed.
Upvotes: 0