How to define password rules for an ASP.NET membership provider?

Question

When using web form authentication with an ASP.NET Membership Provider, we adhere to some fairly strong password rules by default. I think eight characters are required, including one non-alpha.

I don’t want them all to be involuntarily, but usually I don’t use the non-alpha character in my own password and I feel like a hypocrite, forcing my users to do this.

I looked, but I can’t understand where this rule is defined. I'm sure I just missed something simple - does anyone know?

Answer 1

See this article where you can set the minRequiredNonAlphanumericCharacters parameter:

http://msdn.microsoft.com/en-us/library/ms998347.aspx#paght000022_sqlmembershipproviderconfig

Answer 2

You can use the passwordStrengthRegularExpression property in the configuration section \ system.web \ membership \ providers \ to add a web configuration.

I don't know if ASP.NET allows you to create an account if the password does not match the especified regular expression.

Here is an example here .