Update default password_length to be 8 minimum - Githubissues

heartcombo / devise

Flexible authentication solution for Rails with Warden.

http://blog.plataformatec.com.br/tag/devise/

MIT License

23.83k stars 5.53k forks source link

Update default password_length to be 8 minimum #5675

Open matthewford opened 4 months ago

matthewford commented 4 months ago

OWASP recommends a password length of at least 8 characters https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html#implement-proper-password-strength-controls

Partly addresses https://github.com/heartcombo/devise/issues/5591