Changes

Security - Password Strength Report

1,452 bytes added, 15:50, 30 June 2017
no edit summary
One of these reports is the Password Strength Report. This report allows for a review of the strength of users passwords.
[[File;:SecurityReports-PasswordStrength_001.png|800px]]
Password strength is determined according to Google's Password rating system API. http://www.codeproject.com/Articles/19245/Google-Password-Strength-API
1 = Weak, 2 = Medium, 3 = Strong, 4 = Best
 
 
The report allows you to group the types before display. Using All allows you to see all non-retired users in a single report.
 
 
[[File:SecurityReports-PasswordStrength_002.png|800px]]
 
 
 
=Update=
As of 2016-06-28, the Google API wasn't available which caused the bxp reporting to not display correctly.
 
 
To prevent this occurence and also remove dependence on an external service we've implemented a security engine, that caters for four password minimum levels Weak, Medium, Strong and Best. Please find below the minimum password requirments for each level:
 
 
 
==Weak Password Minimum Requirements==
1) New password and confirm new password must match
 
2) Length needs to be 8
 
3) Not contain Spaces
 
 
[[File:Weak_Password.png|800px]]
 
 
 
==Medium Password Minimum Requirements==
1) New password and confirm new password must match
 
2) Length needs to be 8
 
3) Not contain Spaces
 
4) Must contain at lease one symbol
 
 
[[File:Medium_Password.png|800px]]
 
 
 
==Strong Password Minimum Requirements==
1) New password and confirm new password must match
 
2) Length needs to be 8
 
3) Not contain Spaces
 
4) Must contain at lease one symbol
 
5) Must contain at least one number
 
6) Must contain at least one Uppercase letter
 
 
 
[[File:Strong_Password.png|800px]]
 
 
 
==Best Password Minimum Requirements==
1) New password and confirm new password must match
 
2) Length needs to be 8
 
3) Not contain Spaces
 
4) Must contain at lease one symbol
 
5) Must contain at least one number
 
6) Must contain at least one Uppercase letter
 
7) Not contain the the same character 3 times in a row
 
8) Must not contain both the first name of the user or the surname of the use
1 = Weak, 2 = Medium, 3 = Strong, 4 = Best[[File:Best_Password.png|800px]]
The report allows you to group the types before display. Using All allows you to see all non-retired users in a single report.
Whilst far from perfect it does provide a reasonable approximation of the results.
[[File;SecurityReports-PasswordStrength_002.png]]
[[Category:Topic:Security]]
343
edits