DEV Community

Discussion on: RegEx password validators is madness

Collapse
 
jingxue profile image
Jing Xue

I don't understand why you need to remove password validators.

The idea of sentences for passwords isn't mutually exclusive from requiring certain types of characters. A sentence containing only alphabetical characters is still less secure than one of the same length that contains all kinds of characters.

Both length and character types can be coded into validation logic. In fact, I don't remember when was last time I ran into a validator that does not have a minimum length requirement.

Collapse
 
polterguy profile image
Thomas Hansen

I explain the math in the article. As to minimum length, sure, that's a great idea.