Require password policies configuration #2943

Closed
opened 2025-11-02 04:54:52 -06:00 by GiteaMirror · 1 comment
Owner

Originally created by @misterpoesy on GitHub (Feb 20, 2019).

  • Gitea version (or commit ref):
  • Git version:
  • Operating system:
  • Database (use [x]):
    • PostgreSQL
    • [x ] MySQL
    • MSSQL
    • SQLite
  • Can you reproduce the bug at https://try.gitea.io:
    • Yes (provide example URL)
    • No
    • Not relevant
  • Log gist:

Description

In sample config file app.ini.sample, I can config MIN_PASSWORD_LENGTH of security section. But password like '0123456789' still not secure. Implementation of custom password policies configuration is strongly recommended.

Screenshots

Originally created by @misterpoesy on GitHub (Feb 20, 2019). <!-- 1. Please speak English, this is the language all of us can speak and write. 2. Please ask questions or configuration/deploy problems on our Discord server (https://discord.gg/NsatcWJ) or forum (https://discourse.gitea.io). 3. Please take a moment to check that your issue doesn't already exist. 4. Please give all relevant information below for bug reports, because incomplete details will be handled as an invalid report. --> - Gitea version (or commit ref): - Git version: - Operating system: - Database (use `[x]`): - [ ] PostgreSQL - [x ] MySQL - [ ] MSSQL - [ ] SQLite - Can you reproduce the bug at https://try.gitea.io: - [ ] Yes (provide example URL) - [ ] No - [ ] Not relevant - Log gist: ## Description In sample config file [app.ini.sample](https://github.com/go-gitea/gitea/blob/master/custom/conf/app.ini.sample), I can config MIN_PASSWORD_LENGTH of security section. But password like '0123456789' still not secure. Implementation of custom password policies configuration is strongly recommended. ## Screenshots <!-- **If this issue involves the Web Interface, please include a screenshot** -->
GiteaMirror added the type/enhancementtopic/security labels 2025-11-02 04:54:52 -06:00
Author
Owner

@mrsdizzie commented on GitHub (Sep 7, 2020):

This was implemented as PASSWORD_COMPLEXITY https://docs.gitea.io/en-us/config-cheat-sheet/#security-security

@mrsdizzie commented on GitHub (Sep 7, 2020): This was implemented as PASSWORD_COMPLEXITY https://docs.gitea.io/en-us/config-cheat-sheet/#security-security
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#2943