A password validator for django, based on zxcvbn-python and available with pip.
Project description
# django-zxcvbn-password-validator
A password validator for django, based on zxcvbn-python and available with pip.
[![PyPI version](https://badge.fury.io/py/django-zxcvbn-password-validator.svg)](https://badge.fury.io/py/django-zxcvbn-password-validator)
# How to use
Add it to your requirements and get it with pip.
django-zxcvbn-password-validator==1.0.2
Then everything happens in your settings file.
Add `'django_zxcvbn_password_validator'` in the `INSTALLED_APPS` :
INSTALLED_APPS = [
...
'django_zxcvbn_password_validator'
]
Modify `AUTH_PASSWORD_VALIDATORS` :
AUTH_PASSWORD_VALIDATORS = [
{
'NAME': 'django_zxcvbn_password_validator.ZxcvbnPasswordValidator',
},
...
]
You could choose to use zxcvbn alone, but I personally still use Django's `UserAttributeSimilarityValidator`.
Finally set the `PASSWORD_MINIMAL_STRENGH` to your liking, every password scoring
lower than this number will be rejected :
# 0 too guessable: risky password. (guesses < 10^3)
# 1 very guessable: protection from throttled online attacks. (guesses < 10^6)
# 2 somewhat guessable: protection from unthrottled online attacks. (guesses < 10^8)
# 3 safely unguessable: moderate protection from offline slow-hash scenario. (guesses < 10^10)
# 4 very unguessable: strong protection from offline slow-hash scenario. (guesses >= 10^10)
PASSWORD_MINIMAL_STRENGH = 3
A password validator for django, based on zxcvbn-python and available with pip.
[![PyPI version](https://badge.fury.io/py/django-zxcvbn-password-validator.svg)](https://badge.fury.io/py/django-zxcvbn-password-validator)
# How to use
Add it to your requirements and get it with pip.
django-zxcvbn-password-validator==1.0.2
Then everything happens in your settings file.
Add `'django_zxcvbn_password_validator'` in the `INSTALLED_APPS` :
INSTALLED_APPS = [
...
'django_zxcvbn_password_validator'
]
Modify `AUTH_PASSWORD_VALIDATORS` :
AUTH_PASSWORD_VALIDATORS = [
{
'NAME': 'django_zxcvbn_password_validator.ZxcvbnPasswordValidator',
},
...
]
You could choose to use zxcvbn alone, but I personally still use Django's `UserAttributeSimilarityValidator`.
Finally set the `PASSWORD_MINIMAL_STRENGH` to your liking, every password scoring
lower than this number will be rejected :
# 0 too guessable: risky password. (guesses < 10^3)
# 1 very guessable: protection from throttled online attacks. (guesses < 10^6)
# 2 somewhat guessable: protection from unthrottled online attacks. (guesses < 10^8)
# 3 safely unguessable: moderate protection from offline slow-hash scenario. (guesses < 10^10)
# 4 very unguessable: strong protection from offline slow-hash scenario. (guesses >= 10^10)
PASSWORD_MINIMAL_STRENGH = 3
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Close
Hashes for django-zxcvbn-password-validator-1.0.3.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | 3a60390f0d387b5344e05d364f77bd1375ab7b529fde1a5cd9d10657a9a0cfb5 |
|
MD5 | b75a4b4e2b6b110fc9cdd0cc48406ca4 |
|
BLAKE2b-256 | cb05dd5356a36dd36e072f5e22e59af513f277ddddc53577b4fd720023790dd2 |