[GH-ISSUE #59] Login Page Should Not Flag Password as Bad when less than 8 characters #26

Closed
opened 2026-02-27 08:14:42 +03:00 by kerem · 1 comment
Owner

Originally created by @IamTHEvilONE on GitHub (Oct 19, 2021).
Original GitHub issue: https://github.com/lldap/lldap/issues/59

Date = Tue 19 Oct 2021 02:07:48 PM UTC
nitnelave/lldap latest 2058071a9e8b 6 hours ago 27.4MB

When logging in, the page should not give a hint as to the minimum password size:

image

As soon as there is 8 characters in the password field, the warning is removed.

7 Characters:
image

8 characters
image

Originally created by @IamTHEvilONE on GitHub (Oct 19, 2021). Original GitHub issue: https://github.com/lldap/lldap/issues/59 Date = Tue 19 Oct 2021 02:07:48 PM UTC nitnelave/lldap latest 2058071a9e8b 6 hours ago 27.4MB When logging in, the page should not give a hint as to the minimum password size: ![image](https://user-images.githubusercontent.com/2575419/137926749-ff53bcfb-429c-48f1-a8be-d5419b976fb3.png) As soon as there is 8 characters in the password field, the warning is removed. 7 Characters: ![image](https://user-images.githubusercontent.com/2575419/137927035-3ed5bc15-3829-43bc-b9d5-43fe336b85e0.png) 8 characters ![image](https://user-images.githubusercontent.com/2575419/137927098-1e77ed11-d952-471f-bc0e-c14a85eb6201.png)
kerem 2026-02-27 08:14:42 +03:00
Author
Owner

@nitnelave commented on GitHub (Oct 19, 2021):

That's just a helpful hint for users typing in their password, since it's the minimum requirement. Getting the minimum requirement from the code is easy, so it doesn't really help an attacker to know that the minimum password length is 8 from the UI :)

<!-- gh-comment-id:946822064 --> @nitnelave commented on GitHub (Oct 19, 2021): That's just a helpful hint for users typing in their password, since it's the minimum requirement. Getting the minimum requirement from the code is easy, so it doesn't really help an attacker to know that the minimum password length is 8 from the UI :)
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/lldap-lldap#26
No description provided.