ASP.NET Membership Password?

Question

If I require a password to be between 7 and 16 characters and contain at least 1 numeric password and then send a temporary password that contains no numeric characters and % signs and the ^ sign, will the password fail?

Answer 1

I do not believe so. The check for password complexity requirements should only occur when the password is created or changed.

Answer 2

IIRC, the temporary password will follow the rules that you have establish. I would use the MembershipUser method: ResetPassword, to create all temporary passwords for the users.

Answer 3

I suggest creating all temporary passwords to match the password complexity rules.

However the rules are only enforced when the password is changed, not when you log in.

The percent symbol shouldn't be used just in case it's misinterpreted as escaped hex.

Answer 4

You'll be fine. It only checks the complexity when you change it.