#2991 [Feature Request] Individual Entry Password Rules

[0xebjc]

I frequently have sites with very specific password requirements. For example requiring 2 special characters, but only allowing for a specific set of special characters like !@#$%^&* and no others or requiring at least 2 numbers.

The current password generator does not handle this well, for example, derive from previous will assume to use all special characters including potentially not allowed characters. Another issues is like if numbers are present in the previous password then the generator could generate a password potentially without numbers. It's also hard to remember some sites password requirements at times to. Another reason to have the ability to store the password requirements in the entry for each entry.

The solution I'm asking for is for each entry allow for to defined that entries password requirements. and save it in the entries record. And allow for more specific rules like limits and a list of specific characters

1.) must contain at least 2 of the following " !@#$%^&* "
2.) must container at least 2 numbers
3.) must contain 2 up and 2 lowercase letters

The ability to have multiple sets of rules per entry, like define a list of characters per rule and the requirements, like at least # number of, or no more than # of, etc.

Thank you for a great tool!

[Paul]

Password profiles can already be saved in the password generator.
Add a Note to the entry to advise which password profile is required.

cheers, Paul

[Dominik Reichl]

I'd recommend what Paul suggested.

Alternatively, you might be interested in the RuleBuilder plugin:
https://keepass.info/plugins.html#rulebuilder

Best regards,
Dominik

[0xebjc]

Paul,

Thank you for your time and quick response.

I already know about the ability to save password generator profiles in the password generator.

A set of generic profile rules are not what I need, and having a +100 number of the profiles stored in the generator makes it very cumbersome to scroll through and difficult to identify easily which rule applies to which site.

I have ~100 or more specific sites with very unique allowed and not allowed characters and very specific requirement rules and many have 30-90 day required new password changes. These are typically government, banking, and corporate specific rules. Some sites there are multiple subdomains where each have different rules, like adc.worksite.com, different from def.worksite.com, etc. or 123.portal.gov vs 456.portal.gov

Some of these rules include passwords for example might require that the password must not begin with a number or must not have 3 consecutive of the same character.

Being able to create, store, or update a password generator profile attached directly, embedded, to a record wold make it much more simple to not have to identify which rule applies to which site when required to update the passwords per each specific sites unique rules..

The goal would be to simply open up an entry and generate a new password per the stored profile rules of that entries requirements and restrictions.

Thanks again,
-JC

[Paul]

Why people insist on making stupid password rules is beyond me. All you do is encourage people to find ways around them because they are too hard to use.

I would use Notes to store the password requirements and make manual changes when you are forced to change a password - which is also a dumb idea.

cheers, Paul