Comments on: Rails validation make sure your user passwords are strong

By: Mats Gard

Mats Gard — Wed, 14 Apr 2010 09:52:54 +0000

Sorry, I forgot .* before \d in my last post, it should be like this:
^(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?!.*[^\da-zA-Z]).{8,15}$

Thanks:
http://www.rubular.com/

By: Mats Gard

Mats Gard — Wed, 14 Apr 2010 09:03:55 +0000

The “funky charcters” only include whitespace, another solution to ONLY allow \da-zA-Z, would be like this:
^(?=\d)(?=.*[a-z])(?=.*[A-Z])(?!.*[^\da-zA-Z]).{8,15}$

If you need to add allowed characters (but not required) you could for example add ‘+’ like this:
^(?=\d)(?=.*[a-z])(?=.*[A-Z])(?!.*[^\da-zA-Z\+]).{8,15}$

By: Mikhailov

Mikhailov — Tue, 06 Jan 2009 12:42:11 +0000

I’ve wrote an article about generate random password before user has been saved
Please take a look:
http://railsgeek.com/2009/1/6/generate-random-password-in-rails

By: mb

mb — Sun, 30 Sep 2007 04:01:04 +0000

I think the dot(.) in the funky char set must be escaped (like \.).

By: GeoLabs » Links for January 31st through June 26th

GeoLabs » Links for January 31st through June 26th — Wed, 27 Jun 2007 20:58:26 +0000

[...] Vixiom Axioms Â» Rails validation make sure your user passwords are strong – [...]

By: Hank

Hank — Fri, 16 Feb 2007 10:41:39 +0000

validates_format_of :password, /^(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?!.*\s).{8,15}$/