The error message for complexity is misleading, making it sound like a number of characters is what is required, rather than a number of types of characters.

'Password must contain at least one character of the following types: lowercase, uppercase, digit or punctuation.', 'Password must contain at least @count characters of different types (lowercase, uppercase, digit or punctuation).'

Recommending change to:

'Password must contain characters of at least one of the following types: lowercase, uppercase, digit or punctuation.', 'Password must contain characters of at least @count different types (lowercase, uppercase, digit or punctuation).'

Comments

  • AohRveTPV committed 90f1367 on 7.x-1.x authored by sveldkamp 
    Issue #2464503 by sveldkamp: Complexity error message is misleading/...
aohrvetpv’s picture

aohrvetpv commented
Status: Active » Fixed

Thanks

  • AohRveTPV committed cbdf131 on 6.x-1.x authored by sveldkamp 
    Issue #2464503 by sveldkamp: Complexity error message is misleading/...
aohrvetpv’s picture

aohrvetpv commented

Would like to rename this constraint by the way. "Complexity" seems vague, something like "character types" or "character classes" would seem better to me. Open to suggestions.

aohrvetpv’s picture

aohrvetpv commented

Opened issue regarding my previous comment: #2464895: Rename "complexity" constraint

Would also be interested to know if you think it should not be renamed.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.