Change Details

After T94774, we can define password policies based on group membership. Users in the Ombudsmen group (https://meta.wikimedia.org/wiki/Special:GlobalGroupPermissions/ombudsman) have access to checkuser data globally. An account compromise could impact the privacy of our users. My proposal is setting an 8-byte minimum length (users will be prompted to change their password on login) in the near term, and then require 8-byte minimum passwords to login after users have had time to update their passwords.

After T94774, we can define password policies based on group membership. Users in the who are in the Checkuser group on any wiki have access to user's IP addresses. An account compromise could impact the privacy of our users. Since this is a fairly large group, I'm not sure what an appropriate initial and long-term policy should be. I think 8-byte minimum is a good start.

After T94774, we can define password policies based on group membership. Users in the Ombudsmen group (https://meta.wikimedia.org/wiki/Special:GlobalGroupPermissions/ombudsman) have access to checkuser data globallywho are in the Checkuser group on any wiki have access to user's IP addresses. An account compromise could impact the privacy of our users. My proposalSince this is setting an 8-byte minimum length (users will be prompted to change their password on login) in the near term,a fairly large group, I'm not sure what an appropriate initial and long-term policy should be. and then requireI think 8-byte minimum passwords to login after users have had time to update their passwordsis a good start.