FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login
    1. Home
    2. Tags
    3. passwords
    Log in to post
    • All categories
    • danD

      Solved Display password to users

      Q&A
      • passwords • • dan
      2
      0
      Votes
      2
      Posts
      1.3k
      Views

      danD

      There is no built in support for this, but you may be able to modify your theme to allow for this functionality using javascript.

      Here is a relatively simple example online - https://www.w3schools.com/howto/howto_js_toggle_password.asp - that should be helpful.

    • danD

      Password that never expires?

      Q&A
      • passwords expiration • • dan
      5
      0
      Votes
      5
      Posts
      1.7k
      Views

      danD

      If you needed to, you could always build an API integration (the User Update API lets you reset passwords, or you could initiate a Change Password Request) into your application for a specific user.

    • M

      Unsolved Migrating users from in-house system to FusionAuth

      General Discussion
      • encryption passwords • • mootie
      2
      0
      Votes
      2
      Posts
      2.0k
      Views

      M

      You can implement any password hashing scheme as a plugin and load it into FusionAuth. Then you simply migrate the user using new scheme. There is a tutorial on that matter in the docs.

    • danD

      Breached passwords and registrations

      Q&A
      • breached passwords registrations • • dan
      4
      0
      Votes
      4
      Posts
      2.0k
      Views

      danD

      If you want to use the breached password detection feature, then that check will be applied for any new account registrations.

      You could always disable the breached password detection feature.

      Sorry, I don't have a better answer for you.

    • danD

      Password validation rules

      Q&A
      • passwords rules registration validation • • dan
      2
      0
      Votes
      2
      Posts
      3.7k
      Views

      danD

      Our validation takes in inverse approach. The setting is actually to require a non-alphanumeric character. So any character that is not alphabetic, or a digit, will satisfy this requirement.

      There is not a fixed set of symbols as this would reduce the password entropy, which is generally a bad idea.

    • danD

      I have a fusionauth license, can I install it on non-prod systems?

      Q&A
      • license passwords • • dan
      3
      0
      Votes
      3
      Posts
      2.2k
      Views

      danD

      Actually, as of when I write this post, we have two license keys available for anyone with a paid edition. One is a prod license and the other is a non prod license. The latter is a good fit for testing, CI, etc.

    • danD

      Creating a user with a hashed password

      Q&A
      • users passwords hashed password • • dan
      2
      0
      Votes
      2
      Posts
      1.1k
      Views

      danD

      Currently the only way to accomplish this will be to use the Import API, as you mentioned: https://fusionauth.io/docs/v1/tech/apis/users#import-users

      We do have an open feature request to allow hashes to be provided on the User API, which I think would be what you're looking for: https://github.com/FusionAuth/fusionauth-issues/issues/348

      Feel free to upvote that issue.

    • danD

      Are there any disallowed characters in passwords?

      Q&A
      • passwords • • dan
      3
      0
      Votes
      3
      Posts
      1.4k
      Views

      robotdanR

      In the UI you can select "Special character" to require at least one special character. If anyone is looking to understand which characters will satisfy this requirement read on.

      If you view the tooltip or the API - you’ll see the configuration is actually for non-alpha-numeric.

      https://fusionauth.io/docs/v1/tech/apis/tenants#create-a-tenant

      tenant.passwordValidationRules.requireNonAlpha
      Whether to force the user to use at least one non-alphanumeric character.

      So instead of limiting this to a specific set of special characters, we allow it to be any character that is not a unicode alphabetic and not a digit. In this way, we do not artificially limit the entropy of the password by saying you must use one or more characters for a finite set of "special characters" as you may be used to seeing on some login forms.

    • danD

      Password policies for password based logins?

      Q&A
      • passwords policies • • dan
      2
      0
      Votes
      2
      Posts
      1.4k
      Views

      danD

      You set these at the tenant level.

      Home / Settings /Tenants / Edit in the admin UI.

      You can also use the API or a kickstart file to set these.