Password policy

Hey guys,

It would be really nice if something like 'password' is no valid password. I`ve found how to increase the password length but nothing that forces to use a combination of numbers, (special) characters, capitals...

greetings

@dblessing I think this feature is very important. Please consider add this in future release. Thank you very much!

This should get a security flag. If you allow users to have a trivial password, this opens many attack vectors.

Added feature proposal in GitLab FOSS ~14106 labels

Another request for this feature: https://gitlab.zendesk.com/agent/tickets/55254

mentioned in issue gitlab-foss#27738 (closed)

Would it be possible to make devise_security_extension an option?

https://github.com/phatworx/devise_security_extension

added gitlab-foss2278658 gitlab-foss2024184 backend in GitLab FOSS labels

changed milestone to %Next 3-6 months in gitlab-foss

This is a needed feature for NIST CUI compliance. Without these features, the tool would fail an audit.NIST.SP.800-171.pdf

moved from gitlab-foss#3572 (moved)