R 4.1.2 Password Strength

[dsmann12]

Summary

Password must be 8 characters or longer.

Rationale

New users should select a password that is long enough to offer basic security from brute force guesses

Users

New users or users who are attempting to change their password

Preconditions

• User is not logged in and is attempting to create a new account OR
• User is logged in and is attempting to change their password

Basic Course of Events

• When creating a new account, the user will have a prompt for password
• If the password input is less than 8 characters, the system should alert the user of the system rules for password requirements
• If the password input is at least 8 characters, the system should create the account. OR
• When changing password, the user will have a prompt for password
• If the inputted password is less than 8 characters, the system should alert the user of the system rules for password requirements
• If the password input is at least 8 characters, the system should update the user's password.