From cdc97c6330f67f863f091468c731f321c1b9709c Mon Sep 17 00:00:00 2001 From: John Olheiser Date: Tue, 8 Sep 2020 17:06:39 -0500 Subject: [PATCH] Check passwords against HaveIBeenPwned (#12716) * Implement pwn Signed-off-by: jolheiser * Update module Signed-off-by: jolheiser * Apply suggestions mrsdizzie Co-authored-by: mrsdizzie * Add link to HIBP Signed-off-by: jolheiser * Add more details to admin command Signed-off-by: jolheiser * Add context to pwn Signed-off-by: jolheiser * Consistency and making some noise ;) Signed-off-by: jolheiser Co-authored-by: mrsdizzie Co-authored-by: zeripath --- doc/advanced/config-cheat-sheet.en-us.md | 1 + 1 file changed, 1 insertion(+) diff --git a/doc/advanced/config-cheat-sheet.en-us.md b/doc/advanced/config-cheat-sheet.en-us.md index 86f60e08..7f969add 100644 --- a/doc/advanced/config-cheat-sheet.en-us.md +++ b/doc/advanced/config-cheat-sheet.en-us.md @@ -344,6 +344,7 @@ set name for unique queues. Individual queues will default to - digit - use one or more digits - spec - use one or more special characters as ``!"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~`` - off - do not check password complexity +- `PASSWORD_CHECK_PWN`: **false**: Check [HaveIBeenPwned](https://haveibeenpwned.com/Passwords) to see if a password has been exposed. ## OpenID (`openid`)