How do I use the Password Policy module?

Question

I just installed and configured the Password Policy module, but the constraints like password length should be minimum 8 characters is not reflecting when an administrator user adds a new user and creates an one time login password.

The constraints/plugins provided in Drupal 8 by the Password Policy module aren't working in any scenario. Can anyone suggest the possible cause or the right way of using this module?

This module also doesn't modify the default recommendations on /admin/people/create.

Recommendations to make your password stronger:

• Make it at least 12 characters
• Add lowercase letters
• Add uppercase letters
• Add punctuation

Answer 1

Please see the reference link below which has information about how to use this module for Drupal 8

https://opensenselabs.com/blog/tech/drupal-password-policy-module

1. There might be other modules like PRLP (Password reset landing page) or other relevant password setting modules that might not be allowing the policy to be enforced.
2. You can check by uninstalling them and see if the created policy is being enforced on the default user form.

Answer 2

Each type of constraint is a sub-module, so in order to add a constraint for character length, for example, you need to:

1. Enable the module password_policy_length
2. Add a policy at /admin/config/security/password-policy
3. In #2 you will add individual constraints like password length

The module's README.md file contains pretty good instructions.

Answer 3

In the latest drupal 8 Password Policy recommendation and Password Strength is default functionality and it shows on every password field also it not force you to follow the recommended values.

You can overide the password policy recommendation and force password policy using this module Password Policy Configuration Module