Password Recovery RegEx

This forum is only for questions or discussions about working with the mojoPortal source code in Visual Studio, obtaining the source code from the repository, developing custom features, etc. If your question is not along these lines this is not the right forum. Please try to post your question in the appropriate forum.

Please do not post questions about design, CSS, or skinning here. Use the Help With Skins Forum for those questions.

This forum is for discussing mojoPortal development

This forum is only for questions or discussions about working with the mojoPortal source code in Visual Studio, obtaining the source code from the repository, developing custom features, etc. If your question is not along these lines this is not the right forum. Please try to post your question in the appropriate forum.

You can monitor commits to the repository from this page. We also recommend developers to subscribe to email notifications in the developer forum as occasionally important things are announced.

Before posting questions here you might want to review the developer documentation.

Do not post questions about design, CSS, or skinning here. Use the Help With Skins Forum for those questions.
This thread is closed to new posts. You must sign in to post in the forums.
5/5/2010 8:31:16 PM
davidgdean
Gravatar
Total Posts 131
View Posts

Password Recovery RegEx

Is there a way to change the complexity of the password in the password recovery feature? Basically I'd like to have alphanumeric only and remove special characters and / or shorten the length. 

I'm having issues where my users can't copy and paste this "complex" password. Darn users. 

I'm hoping making it a little simpler will help.

5/7/2010 2:26:30 PM
Joe Audette
Gravatar
Total Posts 18439
View Posts

Re: Password Recovery RegEx

Hi David,

Its really not a regex thing, it is a random password generator used only when using hashed passwords. Since we can't decrypt a hashed password to send it to the user for password recovery, a new random password is generated. The length of the password is the minimum password length as defined in site settings plus 2. I implemented it today so that we pass in a string with allowed password chars to the generator so it can be specified in Web.config if you want to make simpler generated passwords (though of course stronger passwords are better for security). This will be available in the next release.

Best,

Joe

12/20/2010 11:14:16 AM
Jamie E
Gravatar
Total Posts 1203
View Posts
Proud member of the mojoPortal team

Help support mojoPortal!
Add-on modules

Re: Password Recovery RegEx

Hi Joe, just a belated thank you for adding this much-needed update for hashed passwords--I didn't even realize it was there until recently. I'll send you a new help file for this feature setting that incorporates this change.

Since the "forgot password" email includes both the username and password, could you update the "forgot password" link and descriptions to "forgot username or password" everywhere? That might cut down on manual support as well, for those of us who are using user ID for login.

Thanks!

Jamie

You must sign in to post in the forums. This thread is closed to new posts.