Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Daniel 29 posts 142 karma points
    Oct 05, 2017 @ 18:17
    Daniel
    0

    minRequiredPasswordLength < 10 not working in 7.7.2

    Hi,

    I started using Umbraco Version 7.7 (actually 7.7.2), but I am not able to reduce the minRequiredPasswordLength from 10 to 9 characters, as I did in the pre-7.7 area. I did make the change in the web.config, but I cannot set my 9 character password in the back-office, as it gives me an error that it is not 10 or more characters.

    I use a (simple) algorithm to generate a password for all my work, including the Umbraco developments, and that results in a 9 character password.

    So is this a bug, or should I find another algorithm for my post-7.7 Umbraco sites?

    Thanks,

    Daniel

  • Christian A 24 posts 98 karma points c-trib
    Nov 03, 2017 @ 11:03
    Christian A
    0

    Experiencing the same in Umbraco 7.7.4, when i tried changed the minRequiredPasswordLength to 8 the backoffice still demands a length of minimum 10.

  • David Parr 48 posts 206 karma points
    Nov 03, 2017 @ 11:40
    David Parr
    0

    Is yours a new install or is it from an upgrade? Works fine for me on a new install.

    Whilst this does seem like a bug, I have to question why you are specifically using or requiring passwords of 9 characters in length? With all the password managers available these days, like LastPass, 1Password and such why you are not using much more secure passwords.. 9 characters really isn't a difficult amount to crack, it could be done in 5 days or less to a determined attacker with average processing power.

    Sorry to take this off topic, and I hope you don't find me rude. I am just curious as to your thinking behind some 9 character password usage you have going on.

  • Christian A 24 posts 98 karma points c-trib
    Nov 05, 2017 @ 08:46
    Christian A
    0

    For me, it is on a brand new 7.7.4 installation.

  • Daniel 29 posts 142 karma points
    Nov 05, 2017 @ 14:53
    Daniel
    0

    It's on a new installation as well.

    • off topic -- Regarding "using or requiring passwords of 9 characters in length? "

    As said, I use a (simple) algorithm to generate a password for all my work. That (most of the time) results in a 9 character password As I often am at clients (or friends), I don't always have LastPass at hand... Hence my algorithm...

    I now just have to remember that for Umbraco, I need a 10 character pw... - off topic --

  • Limberg Michelsen 22 posts 99 karma points
    May 28, 2018 @ 18:01
    Limberg Michelsen
    0

    Is this still an issue? I am running 7.10.1, but can't set a password shorter than 10 characters

    Should should really be fixed, so that changing minRequiredPasswordLength actually works :/

  • Marco 12 posts 93 karma points c-trib
    May 29, 2018 @ 06:02
    Marco
    0

    Hi Limberg,

    I just installed a clean installation of Umbraco 7.10.1 via Nuget. Without modifying anything the installation dialog states that the password should be at least 10 characters long.

    So I edited the web.config's "UsersMembershipProvider" to the following:

    <add name="UsersMembershipProvider" type="Umbraco.Web.Security.Providers.UsersMembershipProvider, Umbraco" minRequiredPasswordLength="9"/>
    

    I rebuild the project and run it and now the installation dialog says that the password should be at least 9 characters long.

    Could you please verify your settings in web.config? Perhaps you should try to rebuild and/or restart IIS Express.

  • Christian A 24 posts 98 karma points c-trib
    May 30, 2018 @ 16:11
    Christian A
    0

    Marco, have you tried actually updating the password in backoffice after changing the setting? I haven't tested it on 7.10.1 myself, but on 7.7.4 it wouldn't accept anything shorter than 10 characters even though the UI stated something else.

  • Limberg Michelsen 22 posts 99 karma points
    May 31, 2018 @ 07:08
    Limberg Michelsen
    0

    Like Christian says, I changed the length for an existing project and changing the password in the backoffice still tells me that the password has to be 10 characters.

    So it might work for the password when installing, but the backend doesn't seem to care about this setting.

  • Marco 12 posts 93 karma points c-trib
    Jun 03, 2018 @ 09:11
    Marco
    0

    Hi Limberg and Christian,

    I've been doing some tests on my local machine with clean Umbraco installations. Both version 7.7.4 and 7.10.4.

    In both cases everything seems to be working just fine. I set minRequiredPasswordLength="5" and I was able to set a password of 5 characters on either version.

    Besides that, I can't really find reported issues on Github or Umbraco issue tracker regarding your issue.

    Really all I did was

    1. install clean Umbraco.
    2. Updated web.config setting to minRequiredPasswordLength="5"
    3. Re-run application from VS (ctrl+F5)
    4. Update password for my user in user section to 5 character password
    5. Logout and login with new password
  • Daniel 29 posts 142 karma points
    Jun 16, 2020 @ 09:09
    Daniel
    0

    Hi Marco, Thanks for your efforts. I tried on V8.6.1, but with the same result: At step 4 - Update password for my user in user section to 5 character password. The system says: minimum password length 10 characters...

Please Sign in or register to post replies

Write your reply to:

Draft