• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Question How do i set a minimum password length?

Linulex

Silver Pleskian
Is there a way to change the mimimum password length? Now plesk always generates a password of 8 tokens but NLy6UVsRVGUd (12 tokens) is a lot stronger then jCk9j&18 (8 tokens)

regards
Jan
 
Hi Linulex,

did you know, that Plesk gives you the choice to setup "security policies"?

=> Home > Tools & Settings > Security Policy
 
i know, but you can not set the length there.

12 tokens only small characters and numbers is a lot stronger then 8 tokens with small/capital/special tokens and numbers

Security policy "weak" but with a minimum of 12 gives stronger passwords then what plesk calls strong with 8 tokens.

Myd0ghasn0flees -> you can remember, no need to right it down

drOk5@KF -> you cant remember, this will be saved in a textfile, waiting to be stolen by every virus that finds its way to the pc.

regards
Jan
 
@Linulex and @everyone,

In "Tools & Settings > Security Policy > Password Strength", one can always opt for the option "very strong", increasing the length of the password.

Moreover, when using the option "strong", the length of the password is not limited to 8 tokens: one can use a longer password.

Simply stated, when using the Plesk Panel only as an admin, there is not a real problem present: choose the password length of your liking.

However, I do agree that, at least in the case where Plesk Panel is also open for end-users (read: customers), some additional flexibility with respect to password length and strength should be present: it would be nice to have some setting allowing to define the minimum length and format (!) of the passwords.

Regards.........
 
Back
Top