Security - Password Strength Report - Revision history

Thomas Glennon at 14:50, 30 June 2017

2017-06-30T14:50:32Z

Philip Lacey at 10:12, 17 February 2017

2017-02-17T10:12:35Z

Philip Lacey at 10:11, 17 February 2017

2017-02-17T10:11:23Z

Philip Lacey at 10:09, 17 February 2017

2017-02-17T10:09:13Z

Philip Lacey at 10:06, 17 February 2017

2017-02-17T10:06:16Z

Patrick Jenkins at 09:25, 2 February 2017

2017-02-02T09:25:18Z

Patrick Jenkins at 09:16, 2 February 2017

2017-02-02T09:16:39Z

Philip Lacey at 19:19, 28 June 2016

2016-06-28T19:19:56Z

Philip Lacey at 23:06, 28 February 2016

2016-02-28T23:06:32Z

Philip Lacey at 22:17, 9 November 2014

2014-11-09T22:17:41Z

@@ Line 5: / Line 5: @@
-One of these reports is the Password Strength Report.  This report allows for a review of the strength of users passwords.
+One of these reports is the Password Strength Report. This report allows for a review of the strength of users passwords.
 [[File:SecurityReports-PasswordStrength_001.png|800px]]
@@ Line 17: / Line 15: @@
-The report allows you to group the types before display.  Using All allows you to see all non-retired users in a single report.
+The report allows you to group the types before display. Using All allows you to see all non-retired users in a single report.
@@ Line 24: / Line 22: @@
-= Update =
+=Update=
 As of 2016-06-28, the Google API wasn't available which caused the bxp reporting to not display correctly.
@@ Line 34: / Line 30: @@
-== Weak Password Minimum Requirements ==
+==Weak Password Minimum Requirements==
 ) New password and confirm new password must match
@@ Line 47: / Line 41: @@
-) New password and confirm new password must match
+) Not contain Spaces
-) Length needs to be 8
+) Must contain at lease one symbol
@@ Line 63: / Line 55: @@
-) New password and confirm new password must match
+) Length needs to be 8
 ) Not contain Spaces
-−
 ) Must contain at lease one symbol
-−
 ) Must contain at least one number
-−
 ) Must contain at least one Uppercase letter
@@ Line 83: / Line 74: @@
-) New password and confirm new password must match
+) Length needs to be 8
 ) Not contain Spaces
 ) Must contain at lease one symbol
 ) Must contain at least one number
-) Not contain the the same character 3 times in a row
+) Must contain at least one Uppercase letter
 ) Must not contain both the first name of the user or the surname of the use
@@ Line 104: / Line 94: @@
 [[File:Best_Password.png|800px]]
-−

← Older revision		Revision as of 10:12, 17 February 2017
Line 44:		Line 44:


−	[[File:~~bxp_weak_password~~.png\|800px]]	+	[[File:Weak_Password.png\|800px]]

← Older revision		Revision as of 10:11, 17 February 2017
Line 60:		Line 60:


−	[[File:~~bxp_medium_password~~.png\|800px]]	+	[[File:Medium_Password.png\|800px]]

← Older revision		Revision as of 10:09, 17 February 2017
Line 80:		Line 80:


−	[[File:~~bxp_strong_password~~.png\|800px]]	+	[[File:Strong_Password.png\|800px]]

← Older revision		Revision as of 10:06, 17 February 2017
Line 103:		Line 103:


−	[[File:~~bxp_best_password~~.png\|800px]]	+	[[File:Best_Password.png\|800px]]

← Older revision		Revision as of 09:25, 2 February 2017
Line 40:		Line 40:

	2) Length needs to be 8		2) Length needs to be 8
		+
		+	3) Not contain Spaces

@@ Line 30: / Line 30: @@
-To prevent this occurence and also remove dependence on an external service we've implemented a security engine based on the following stack overflow discussion.
+To prevent this occurence and also remove dependence on an external service we've implemented a security engine, that caters for four password minimum levels Weak, Medium, Strong and Best. Please find below the minimum password requirments for each level:
-So now the rule for providing the 1 to 4 rating is:
+== Weak Password Minimum Requirements ==
-* If > 8 characters, 1 point
-* If Upper and lower characters, 1 point
+) New password and confirm new password must match
-* If letters and at least 1 number, 1 point
-* If special character, 1 point
+) Length needs to be 8
-* If a pass phrase, i.e. longer than 25 characters, instant 4 points
-* If 0 points, then, round up to 1 for a weak password.

← Older revision		Revision as of 19:19, 28 June 2016
Line 21:		Line 21:

	[[File:SecurityReports-PasswordStrength_002.png\|800px]]		[[File:SecurityReports-PasswordStrength_002.png\|800px]]
		+
		+
		+
		+	= Update =
		+
		+
		+	As of 2016-06-28, the Google API wasn't available which caused the bxp reporting to not display correctly.
		+
		+
		+	To prevent this occurence and also remove dependence on an external service we've implemented a security engine based on the following stack overflow discussion.
		+
		+	http://stackoverflow.com/questions/75057/what-is-the-best-way-to-check-the-strength-of-a-password
		+
		+
		+	So now the rule for providing the 1 to 4 rating is:
		+
		+	* If > 8 characters, 1 point
		+	* If Upper and lower characters, 1 point
		+	* If letters and at least 1 number, 1 point
		+	* If special character, 1 point
		+	* If a pass phrase, i.e. longer than 25 characters, instant 4 points
		+	* If 0 points, then, round up to 1 for a weak password.
		+
		+
		+	Whilst far from perfect it does provide a reasonable approximation of the results.
		+


	[[Category:Topic:Security]]		[[Category:Topic:Security]]

@@ Line 8: / Line 8: @@
-[[File:SecurityReports-PasswordStrength_001.png]]
+[[File:SecurityReports-PasswordStrength_001.png|800px]]
@@ Line 20: / Line 20: @@
-[[File:SecurityReports-PasswordStrength_002.png]]
+[[File:SecurityReports-PasswordStrength_002.png|800px]]
 [[Category:Topic:Security]]

← Older revision		Revision as of 22:17, 9 November 2014
Line 23:		Line 23:


−	[[Category:Security]]	+	[[Category:Topic:Security]]