Can we please change the message found in drupal_strength.inc from this:

'message' => t('Password must match a Drupal strength level.'),

to this:

'message' => t('Password must match a strength level.'),

Users have no idea what a "Drupal strength level" is, and in fact many don't even know what a "Drupal" is. :-)

CommentFileSizeAuthor
#1 password_policy-7.x-2.x-improve_drupal_strength_message-2496823-1.patch615 bytesaohrvetpv

Comments

aohrvetpv’s picture

aohrvetpv commented
Status: Active » Needs review
StatusFileSize
new password_policy-7.x-2.x-improve_drupal_strength_message-2496823-1.patch615 bytes

Good suggestion. I agree, the word "Drupal" should not be exposed to users.

sgdev’s picture

sgdev commented

Thanks for the speedy response!

sgdev’s picture

sgdev commented

Also I can confirm the patch applies cleanly and have reviewed. :)

aohrvetpv’s picture

aohrvetpv commented

The message seems sort of vague. I wonder if "calculated strength level" might be more informative than "strength level".

In any case, the word Drupal clearly needs to go, so committing.

  • AohRveTPV committed 61d4634 on 7.x-2.x 
    Issue #2496823 by AohRveTPV: Modify Drupal strength level message
aohrvetpv’s picture

aohrvetpv commented
Status: Needs review » Fixed
aohrvetpv’s picture

aohrvetpv commented

Reverting and recommitting to also credit ron_s.

  • AohRveTPV committed 34adf22 on 7.x-2.x 
    Issue #2496823 by AohRveTPV, ron_s: Modify Drupal strength level message
  • AohRveTPV committed 6a86a44 on 7.x-2.x
    Revert "Issue #2496823 by AohRveTPV: Modify Drupal strength level...
sgdev’s picture

sgdev commented

Thanks... I do agree the message is vague. In a certain way I wondered why it's shown at all.

When the message says "Password must have at least 1 digit(s)," there is a very clear course of action for the user.

For Drupal strength level, no definition is presented. Users don't know what they are supposed to do to meet the criteria, and I don't think it would be wise to share all the details. There are already too many details presented.

Not to overly analyze, but how about a checkbox on the subform, and default of disabled?

  $sub_form['drupal_strength_fieldset']['strength_message_display'] = array(
    '#type' => 'checkbox',
    '#title' => t('Display Drupal strength level policy message when password policy requirements are shown.'),
    '#default_value' => $constraint->config['strength_message_display'],
  );

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.