I've been looking at the use of both client side RegularExpression validators and for the server overriding OnValidatingPassword Membership provider method to ensure adherence to a strong password format consisting of:
-10-25 Characters. Two or more of the special characters ! @ # $ % ^ & * _ - + = : ; , . -Two or more Uppercase Letters -Two or more Lowercase Letters -Two or more Numbers. This is what I have so far (?=^.{10,})(?=.*[A-Z]{2,})(?=.*[a-z]{2,})(?=.* [0-9]{2,})(?=(.*\W){1,})(?!.*\s).*$ The main issue I'm having are the requirements for 2 or more of a type of character for a match. The use of quantifiers {2,} appear to only match 2 successive character types, for example uppercase characters. MU46_!28gs is a match but not Mu46_28Gs! is not. However, both should be valid matches. =================================== This list is hosted by DevelopMentor® http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com