[GH-ISSUE #1985] Feature Request: Customizable Password Policy #1487

Open
opened 2026-02-27 11:17:21 +03:00 by kerem · 3 comments
Owner

Originally created by @neonknight on GitHub (Jun 25, 2020).
Original GitHub issue: https://github.com/modoboa/modoboa/issues/1985

Currently passwords must be at least 8 characters, with one uppercase and one number. This is not very flexible.

Please provide a simple UI control to set minimum length and choose required character classes (uppercase, lowercase, numbers, special characters).

Ideally this can be set globally and overridden per domain.

Originally created by @neonknight on GitHub (Jun 25, 2020). Original GitHub issue: https://github.com/modoboa/modoboa/issues/1985 Currently passwords must be at least 8 characters, with one uppercase and one number. This is not very flexible. Please provide a simple UI control to set minimum length and choose required character classes (uppercase, lowercase, numbers, special characters). Ideally this can be set globally and overridden per domain.
Author
Owner

@tonioo commented on GitHub (Sep 4, 2020):

@neonknight You can already customize this in the settings.py file. (this feature is provided by Django natively)
Do we really need a per domain level?

<!-- gh-comment-id:687190079 --> @tonioo commented on GitHub (Sep 4, 2020): @neonknight You can already customize this in the settings.py file. (this feature is provided by Django natively) Do we really need a per domain level?
Author
Owner

@neonknight commented on GitHub (Sep 16, 2020):

Changing settings.py for sure works for me, thanks for the pointer. Will the file be overwritten by modoboa updates?

Do we really need a per domain level?

That would just be the cherry on top of the cake :-) I think a GUI based configuration is necessary, but per domain settings is quite a bonus.

<!-- gh-comment-id:693179483 --> @neonknight commented on GitHub (Sep 16, 2020): Changing settings.py for sure works for me, thanks for the pointer. Will the file be overwritten by modoboa updates? > Do we really need a per domain level? That would just be the cherry on top of the cake :-) I think a GUI based configuration is necessary, but per domain settings is quite a bonus.
Author
Owner

@tonioo commented on GitHub (Oct 21, 2020):

Changing settings.py for sure works for me, thanks for the pointer. Will the file be overwritten by modoboa updates?

If you use the installer, then yes.

That would just be the cherry on top of the cake :-) I think a GUI based configuration is necessary, but per domain settings is quite a bonus.

This feature is provided by Django and depends on the settings.py. I think a GUI for that would be possible but the per-domain level would required a custom password validation system. I don't think it's a priority.

<!-- gh-comment-id:713600786 --> @tonioo commented on GitHub (Oct 21, 2020): > Changing settings.py for sure works for me, thanks for the pointer. Will the file be overwritten by modoboa updates? If you use the installer, then yes. > That would just be the cherry on top of the cake :-) I think a GUI based configuration is necessary, but per domain settings is quite a bonus. This feature is provided by Django and depends on the settings.py. I think a GUI for that would be possible but the per-domain level would required a custom password validation system. I don't think it's a priority.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/modoboa-modoboa#1487
No description provided.