nextcloud / server

☁️ Nextcloud server, a safe home for all your data
https://nextcloud.com
GNU Affero General Public License v3.0
26.13k stars 3.94k forks source link

Shorten weak password message #35790

Open nimishavijay opened 1 year ago

nimishavijay commented 1 year ago

How to use GitHub

Is your feature request related to a problem? Please describe. As discussed with @JuliaKirschenheuter the warning when a password is weak is too long. In #35655 as an intermediary step the message is being displayed in a notification rather than a tooltip, but we discussed that going forward, we should shorten the warning and display it nearer to the password field. Currently it looks like: image

Describe the solution you'd like Show a concise message when the password entered is too weak. for eg:

Your password is weak. Make sure your password is 
* at least 4 characters long
* unique

Once this is done it can moved nearer to the password field.

Describe alternatives you've considered Another option can be to validate password strength as they are being typed, as we have seen on many websites which have a password strength indicator which looks like a sectioned progress bar. This seems (to me) to be more technically complicated but it would cause the weak password notification to be seen less frequently as people will adjust their password before they submit it.

Additional context n/a

cc @jancborchardt

jancborchardt commented 1 year ago

Slight wording adjustment, possibly like this:

The chosen password is not secure:

  • It is present in a compromised passwords list
  • Passwords should be at least 4 characters long[, contain special character, etc etc]
JuliaKirschenheuter commented 1 year ago

Please think about that whole this text will be placed in this small popover menu:

Screenshot from 2023-01-09 17-12-14