I've been looking at the use of both client side RegularExpression
validators and for the server overriding OnValidatingPassword Membership
provider method to ensure adherence to a strong password format consisting
of:
-10-25 Characters.
Two or more of the special characters ! @ # $ % ^ & * _ - +
= : ; , .
-Two or more Uppercase Letters
-Two or more Lowercase Letters
-Two or more Numbers.
This is what I have so far (?=^.{10,})(?=.*[A-Z]{2,})(?=.*[a-z]{2,})(?=.*
[0-9]{2,})(?=(.*\W){1,})(?!.*\s).*$
The main issue I'm having are the requirements for 2 or more of a type of
character for a match. The use of quantifiers {2,} appear to only match 2
successive character types, for example uppercase characters. MU46_!28gs
is a match but not Mu46_28Gs! is not. However, both should be valid
matches.
===================================
This list is hosted by DevelopMentor® http://www.develop.com
View archives and manage your subscription(s) at http://discuss.develop.com