Maniphest T121181

Implement password policy preventing user using their real name
Open, LowPublic
Actions

Assigned To

None

Authored By

	Reedy
	Dec 11 2015, 12:38 AM

Tags

Referenced Files

None

Subscribers

View All 9 Subscribers

Description

Similar to the password can't be the users username, prevent realname usage

https://en.wikipedia.org/wiki/Password_policy#Password_length_and_formation

Details

	Subject	Repo	Branch	Lines +/-
	Add password policy to prevent password including User's Real Name	mediawiki/core	master	+54 -1

Customize query in gerrit

Related Objects

Mentioned In: T200052: Mandate that account passwords must be a minimum of eight characters on Wikimedia projects
T149588: Create password policy using AntiSpoof

Event Timeline

Reedy created this task.Dec 11 2015, 12:38 AM

Reedy raised the priority of this task from to Low.

Reedy updated the task description. (Show Details)

Reedy added projects: MediaWiki-User-login-and-signup, Security-Team.

Reedy subscribed.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 11 2015, 12:38 AM

Krenair subscribed.Dec 11 2015, 12:59 AM

Reedy mentioned this in T149588: Create password policy using AntiSpoof.Oct 31 2016, 4:17 PM

Change 318956 had a related patch set uploaded (by Reedy):
[WIP] Add password policy to prevent password being Users Real Name

https://gerrit.wikimedia.org/r/318956

gerritbot added a project: Patch-For-Review.Oct 31 2016, 4:33 PM

• MZMcBride subscribed.Nov 3 2016, 3:26 PM

Tgr merged a task: T48973: can enter user name & same password separated by a space in username allows creation of new account.Dec 6 2016, 6:26 AM

Tgr added subscribers: • bzimport, Betacommand, • Spage, • wikibugs-l-list.

Change 318956 abandoned by Reedy:
Add password policy to prevent password including User's Real Name

Reason:
cba

https://gerrit.wikimedia.org/r/318956

Reedy removed a project: Patch-For-Review.Jul 20 2017, 12:24 AM

Reedy removed a subscriber: • wikibugs-l-list.

stwalkerster subscribed.Nov 13 2017, 10:42 PM

Tgr mentioned this in T200052: Mandate that account passwords must be a minimum of eight characters on Wikimedia projects.Jul 24 2018, 8:59 AM

Bawolff removed a project: Security-Team.Sep 4 2018, 3:41 PM