There are some conflicting information floating around, on some places there are claims that old password set before changing the minRequiredPasswordLength and minRequiredNonalphanumericCharacters would make those previous password unusable if the didn't meet the requirements, and other posts about this only affecting new passwords.

However, I've noticed something also strange. We changed to:

minRequiredPasswordLength="10" minRequiredNonalphanumericCharacters="1"

And then tried to change the host users password to something that is meets the requirements above (and goes well beyond) but then we get error messages like:

"Your new password was not accepted for security reasons. Please enter a password that you haven't used before and is long and complex enough to meet the site's password complexity requirements."

(the password was not used before and is accepted by the input validation in the form)

How do we change the host password?

This function seem to be a bit broken or at least the description of it is. We tried to instead add a new Superuser but despite having:

minRequiredPasswordLength="15"
minRequiredNonalphanumericCharacters="2"

and having a password that was 15 characters with 2 non alphanumeric characters we got an error message. So we then instead tries with a password with 20 characters and 3 Non alphanumeric characters and that worked. So it seems like either minRequiredPasswordLength or minRequiredNonalphanumericCharacters (or both) actually meen MORE THAN that.

Patrick, which DNN version?

---

Cheers from Germany,
Sebastian Leupold

   

Speed up your DNN Websites with TurboDNN