gregtwallace / certwarden

Cert Warden is a centralized ACME Client. It provides an API for certificate consumers to fetch their individual keys and certs with API keys.
https://www.certwarden.com/
Other
184 stars 6 forks source link

[feat] Allow User-Defined Password Options #7

Closed PasserDreamer closed 1 year ago

PasserDreamer commented 1 year ago

By default, it cannot be set to less than 10 characters. It would be great if there were an option to change it, as not every scenario has such strong requirements.

gregtwallace commented 1 year ago

Even 10 character with no other requirement is pretty weak, particularly considering the security risk of a compromise.

That said, if you insist on worse, dev mode disables the requirement. Toggle it on, change password, toggle back off.

gregtwallace commented 1 year ago

I adjusted the min length to 8 and added comments regarding devMode.