How Asgardeo increase the password complexity?

Having a strong password is one of the most important steps in protecting your online accounts. Weak passwords can be easily guessed or cracked, which can lead to identity theft, financial loss, and other serious consequences.

Please check my previous article “Make passwords hard to guess!” to get an idea of making your password more complex.

Asgardeo provides a way for the organization owners to decide on the complexity of its user’s password.

Steps to manage the complexity of the password of your organization

1. Navigate to https://console.asgardeo.io
2. Log in to your organization (You can create a new account if you are new to Asgardeo)
3. Navigate to the manage section
4. Click Account Security -> Password Validation

Asgardeo — Account Security

You will see a page similar to the one below, where you can decide on the password complexity. By default, the password will require of a minimum length of 8 characters including at least a number, an upper-case letter, a lower-case letter, and a non-alphanumeric character.

Password Validation Configuration

The following are the supported criteria:

• Number of characters
• The type of characters to be added
  - Number (0–9)
  - Upper-case character (A-Z)
  - Lower-case character (a-z)
  - Non-alphanumeric character (!@#$%^&*)
• Unique character — This is an optional validation which use to restrict on a minimum number of different characters to be included.
• Repeated character — This is an optional validation that restricts the maximum number of repeated characters that can be added.
  If this is enabled and set to 2, then passwords can not have more than 2 repeated characters.
  Examples :
  password✅
  passsword❌
  pasSsword✅

5. You can do the required configurations.

6. Click update.

Now you have successfully configured the password validation criteria 👍.

Let’s see how this gets affected.

1. Navigate to manage -> users
2. Click add user
3. Provide the username and other required attributes.
4. Click set password

Option 1: Generate a password

5. Click generate

Generate password

Option 2: Manually add a password

6. Type a password and check the validation component below
- It will dynamically do the validation and displayed it to the user.

Password Validation

In addition to these, you can try out other flows like self-registration, password reset flow from My Account, and reset-password flows.

Thanks for reading!!!