How do I tell the user what the minimum requirement is? about jquery.pwstrength.bootstrap

[ablanco]

Hi wilsonf1, you can find the default options values in src/options.js. It's all documented here.

You can change any of those options. You can choose which rules are being applied (rules.activated) and their associated scores (rules.scores). Those two options are key to figure out what makes a good password for your site, so you can give proper advice to your users. It's also relevant the ui.scores that defines the frontier scores between the verdicts, you can change it as you consider better.

These are the default activated rules:

• wordNotEmail
• wordLength
• wordSimilarToUsername
• wordSequences
• wordLowercase
• wordUppercase
• wordOneNumber
• wordThreeNumbers
• wordOneSpecialChar
• wordTwoSpecialChar
• wordUpperLowerCombo
• wordLetterNumberCombo
• wordLetterNumberCharCombo

All of this rules add or subtract to the final score. So the general advice would be to have a long password that is not an email nor similar to your username, and that contains letters in different cases, several numbers and several symbols. But because the rules keep adding every time they match is possible to get a great score with a password without numbers, just making it long enough for example.

I guess the conclusion is that there are no minimum requirements for a password to score high, just guidelines.

Also, if you don't like this scoring engine, you can use the zxcvbn library to score the passwords.

Regards.

[ablanco]

That options is used to score the password length.

Maybe you should change the rules.scores option itself. Move from [14, 26, 38, 50] to [10, 20, 30, 40] or similar. Lower the score needed to achieve the different verdicts. You can also deactivate rules.

Good luck.

[jameswilson34]

OK sounds good! Last thing - Is there any way I can change the "strong" background from orange to a different colour?

[ablanco]

It uses the bootstrap bar's classes: "error", "warning", "success"

You need to change the bootstrap variables to change the bar color for the warning class, if you want to make the change in the whole site. If you only want to change the warning progress bar in the password strength meter, I'm afraid you'll need to overwrite the bootstrap css rules with your own.

[jameswilson34]

Understood! Thank you!