Configure password complexity
Currently, you can only configure how long a password should be and whether it should be entered twice.
It should be possible to specify the password complexity (minimum number of characters, special characters, numbers, letters, etc.). At the moment you need an extension for this.

-
Klaus Rahn commented
Hinweis/Wunsch:
Innerhalb der Einstellungen findest Du unter Shop den Menüpunkt Anmeldung & Registrierung.
Hier ist es möglich die Länge des Kennwortes zu hinterlegen. Dies finde ich zu unsicher.
Wäre es nicht möglich hier eine Verbindung zum Rule Bilder zuzulassen, um dort dann die eine Regel zu erstellen, wie das Kennwort gebildet werden soll. Zeichenlänge, Klein- Großschreibung, Zahlen und Sonderzeichen.
Dies würde doch zur Kennwortsicherheit beitragen.Gleiches könnte dann auch für die Benutzer & Rechte einführen.
Note/request:
Within the settings you will find the menu item Login & Registration under Shop.
Here it is possible to define the length of the password. I find this too insecure.
Wouldn't it be possible to allow a connection to the rule images here and then create a rule there as to how the password should be formed? Character length, upper and lower case, numbers and special characters.
This would contribute to password security.The same could then also be introduced for users & rights.
Translated with www.DeepL.com/Translator (free version)
-
Lukas Terfort commented
These are some requirements that are common on other sites, but not shopware. They should be added aswell for safety purposes:
The password must contain characters from the following categories:
o Upper case letters (A to Z)
Including “umlaute”
o Lower case letters (a to z)
Including “umlaute”
o Base 10 numbers (0 to 9)
o Non-alphabetic characters (for example !, $, #, %) -
Lukas Terfort commented
Add options to let the merchant choose the strength of the passwords the customers need to fulfill when creating an account.
-
Timo Reddig commented
An inadequate password policy is rated with a medium risk level by the BSI: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/DVS-Berichte/onlineshopping-plattformen.pdf?__blob=publicationFile&v=13