473,325 Members | 2,671 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,325 software developers and data experts.

How to change strong password policy in ASP.NET

Hi.
I am building web apps in visual web developer 2005 express and SQL
2005 express. Users have complained about the strong password policy,
so I would like to change it to somthing like at least 5 letters and 1
number. Thanks for the help in advance.
-Jake

Mar 9 '06 #1
1 3404
By default, the ASP.NET membership providers enforce strong passwords.

For example, the SqlMembershipProvider ensures that passwords are at
least seven characters in length with at least one non-alphanumeric character.

You should ensure that your membership provider configuration
enforces passwords of at least this strength, for maximum security.

If you want to lessen the password complexity rules enforced by your provider,
you can set the following additional attributes in the providers section of your
<membership defaultProvider...> element of web.config :

minRequiredPasswordLength
The default is 7.

minRequiredNonalphanumericCharacters
The default is 1.

See :
http://msdn2.microsoft.com/en-us/lib...ordlength.aspx

Why you would do that is beyond me, though.
I would *never* lessen the security of my ASP.NET apps.

Juan T. Llibre, asp.net MVP
aspnetfaq.com : http://www.aspnetfaq.com/
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
===================================

<ja**@henderson3.net> wrote in message news:11**********************@z34g2000cwc.googlegr oups.com...
Hi.
I am building web apps in visual web developer 2005 express and SQL
2005 express. Users have complained about the strong password policy,
so I would like to change it to somthing like at least 5 letters and 1
number. Thanks for the help in advance.
-Jake


Mar 10 '06 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

3
by: bigoxygen | last post by:
Hi. I have a list that is similar to this: -Evaluation +test +test -Students +test I would like to change the "-" bullet only, but I cannot. My
1
by: Rob Barnes | last post by:
When I try to create a machine-level security policy based on an assembly's strong name, I get the following error: "ERROR: Invalid label or name" The caspol command is: "caspol -machine...
6
by: NormD | last post by:
Our application has three strong-named keys that have to be set up on the local machines. Apparently the Framework can be pushed to the clients with SMS, but I'm being told a human has to do...
0
by: virgo81 | last post by:
hi~ I made smartclient. First, I made a StrongNamed Key(snk file). I add my key file and set allow partiallytrustedcllers.
5
by: Markus Stehle | last post by:
Hi all! I have asp.net web application that uses static impersonation. Is it possible to change the impersonated user during runtime? Within some parts of my application I would like to...
22
by: Bob and Sharon Hiller | last post by:
I have an ASP page that was done in VBScript It is setup to read an Access database and I need to change it to read a Sql 2005 Database. The code that is used to open the Access Database: Set...
8
by: per9000 | last post by:
Dear readers, I have some problems with strong keys. What I want to do is basically this. A - create an application (f.x. strongHello.dll) with a strong key. B - import the functions of this...
3
by: W C Hull | last post by:
We have a request from Auditing to modify the password an a local workstation administrative account every 90 days. We are developing two programs - a VB6 GUI program that will allow the...
1
by: Tom | last post by:
My unsigned DLL works in my project that references it as long as I set Copy Local = true. Now I have signed the DLL with the sn.exe generated keys but have not yet moved the DLL into the GAC. ...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
1
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.