I've been looking at the use of both client side RegularExpression
validators and for the server overriding OnValidatingPassword Membership
provider method to ensure adherence to a strong password format consisting
of:

-10-25 Characters.
Two or more of the special characters  !  @  #  $  %  ^  &  * _  -  +
=  ’ :  ;  ,  .
-Two or more Uppercase Letters
-Two or more Lowercase Letters
-Two or more Numbers.

 This is what I have so far (?=^.{10,})(?=.*[A-Z]{2,})(?=.*[a-z]{2,})(?=.*
[0-9]{2,})(?=(.*\W){1,})(?!.*\s).*$

The main issue I'm having are the requirements for 2 or more of a type of
character for a match. The use of quantifiers {2,} appear to only match 2
successive character types, for example uppercase characters. MU46_!28gs
is a match but not Mu46_28Gs! is not. However, both should be valid
matches.

===================================
This list is hosted by DevelopMentor®  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com

Reply via email to