magento / magento2

Prior to making any Submission(s), you must sign an Adobe Contributor License Agreement, available here at: https://opensource.adobe.com/cla.html. All Submissions you make to Adobe Inc. and its affiliates, assigns and subsidiaries (collectively “Adobe”) are subject to the terms of the Adobe Contributor License Agreement.
http://www.magento.com
Open Software License 3.0
11.56k stars 9.32k forks source link

[Issue] Increase minimum password length for admin user #39327

Open m2-assistant[bot] opened 1 week ago

m2-assistant[bot] commented 1 week ago

This issue is automatically created based on existing pull request: magento/magento2#39319: Increase minimum password length for admin user


Description (*)

PCI 4.0 requires a minimal password length of 12 characters, so it has to be changed from 7 to 12.

Manual testing scenarios (*)

  1. Change password of an existing admin account.
  2. It should fail to change the password if less than 12 characters are used.

Contribution checklist (*)

m2-assistant[bot] commented 1 week ago

Hi @engcom-Bravo. Thank you for working on this issue. In order to make sure that issue has enough information and ready for development, please read and check the following instruction: :point_down:

engcom-Bravo commented 1 week ago

Hi @torhoehn,

Thanks for your reporting and collaboration.

As per the Magento devdocs https://experienceleague.adobe.com/en/docs/commerce-operations/installation-guide/tutorials/admin The password must be at least 7 characters in length and must include at least one alphabetic and at least one numeric character

Hence we are considering this as a improvement to proceed further marking this as Feature Request.

Thanks.

torhoehn commented 1 week ago

@engcom-Bravo What does that mean in terms of processing this PR?

torhoehn commented 1 week ago

@engcom-Bravo I created a PR for the docs as well: https://github.com/AdobeDocs/commerce-operations.en/pull/136