- Your error message for passwords that don't meet your standard is:
"your password must be between 6 and 20 characters"
You will get this message if your password is 5 characters, or 21 characters, or isn't "complex enough" - You limit a password to 20 characters.
- You enforce complexity, but nowhere do you document the requirements.
No comments:
Post a Comment