Password change not needed

Questions
#1

I added a new user. At the first login, the user has to change the password.

Please make this optional by adding a checkbox “Password change at first login”.

Thanks!

#2

@martin.schaible do you wish to require password change on new users only or do you wish more funcionality, when you will force all users to change passwords, for example on some kind of interval 3months, each year, etc.?

#3

I think an interval for changing the password is too much. It just makes users upset.

  • Any user should be able to change their passwords in the backend.

  • Administrators should be able to set password requirements, see image.

  • You could also introduce a rule that after x failed logins, the account is locked for x minutes/hours.

  • Are failed logins logged? If not, that would be good.

  • It would be great if you could implement 2FA authentication in the long term.

Thanks!

PasswordRequirements
PasswordRequirements826×355 11 KB

#4

i created plugin that will force user to change password, but it is still pending. wait couple of days…

1 Like