When new admin account should be created, there is password check for all the necessities.
I'm using KeePassXC and have this allowed:
Yet I'm getting this check result:
Did check the string and it does have all characters necessary as well.
Yet the special char must be switched off - and after this I'm adding manually one special and one number to pretty long password.
This happened to me for each installation so far.
Environment
Pangolin Version: 1.12.2
To Reproduce
Just standard installation.
Expected Behavior
Should let me pass.
Originally created by @ghost on GitHub (Nov 12, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/1853
Originally assigned to: @miloschwartz on GitHub.
### Describe the Bug
When new admin account should be created, there is password check for all the necessities.
I'm using KeePassXC and have this allowed:
<img width="365" height="53" alt="Image" src="https://github.com/user-attachments/assets/bf081afd-fd63-4592-9967-e9a79f09db42" />
Yet I'm getting this check result:
<img width="398" height="174" alt="Image" src="https://github.com/user-attachments/assets/81a14bee-62eb-43fb-8893-4da9af5b0a27" />
Did check the string and it does have all characters necessary as well.
Yet the special char must be switched off - and after this I'm adding manually one special and one number to pretty long password.
This happened to me for each installation so far.
### Environment
- Pangolin Version: 1.12.2
### To Reproduce
Just standard installation.
### Expected Behavior
Should let me pass.
@Pallavikumarimdb commented on GitHub (Nov 13, 2025):
The issue happens because KeePassXC includes some extended ASCII or Unicode symbols (like ¢, §, or ½) that pangolin password validator doesn’t currently recognize as valid special characters. The regex only allows a limited ASCII set: [~!`@#$%^&*()_-+={}[]|\:;"'<>,./?]
@oschwartz10612 , The current password validator rejects strong passwords containing extended ASCII or Unicode symbols (like § or µ). Should we update the regex to a Unicode-aware version to support all valid special characters while keeping the same strength rules?
<!-- gh-comment-id:3528948438 -->
@Pallavikumarimdb commented on GitHub (Nov 13, 2025):
The issue happens because KeePassXC includes some extended ASCII or Unicode symbols (like `¢`, `§`, or `½`) that pangolin password validator doesn’t currently recognize as valid special characters. The regex only allows a limited ASCII set: [~!`@#$%^&*()_\-+={}[\]|\\:;"'<>,.\/?]
@oschwartz10612 , The current password validator rejects strong passwords containing extended ASCII or Unicode symbols (like § or µ). Should we update the regex to a Unicode-aware version to support all valid special characters while keeping the same strength rules?
Closing as not planned because we only plan to support standard ASCII symbols and not all unicode symbols
<!-- gh-comment-id:3608882650 -->
@miloschwartz commented on GitHub (Dec 3, 2025):
Closing as not planned because we only plan to support standard ASCII symbols and not all unicode symbols
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @ghost on GitHub (Nov 12, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/1853
Originally assigned to: @miloschwartz on GitHub.
Describe the Bug
When new admin account should be created, there is password check for all the necessities.
I'm using KeePassXC and have this allowed:
Yet I'm getting this check result:
Did check the string and it does have all characters necessary as well.
Yet the special char must be switched off - and after this I'm adding manually one special and one number to pretty long password.
This happened to me for each installation so far.
Environment
To Reproduce
Just standard installation.
Expected Behavior
Should let me pass.
@Pallavikumarimdb commented on GitHub (Nov 13, 2025):
The issue happens because KeePassXC includes some extended ASCII or Unicode symbols (like
¢,§, or½) that pangolin password validator doesn’t currently recognize as valid special characters. The regex only allows a limited ASCII set: [~!`@#$%^&*()_-+={}[]|\:;"'<>,./?]@oschwartz10612 , The current password validator rejects strong passwords containing extended ASCII or Unicode symbols (like § or µ). Should we update the regex to a Unicode-aware version to support all valid special characters while keeping the same strength rules?
@miloschwartz commented on GitHub (Dec 3, 2025):
Closing as not planned because we only plan to support standard ASCII symbols and not all unicode symbols