ASP.NET 4 Unleashed

Modifying User Password Requirements

By default, passwords are required to contain at least 7 characters and 1 nonalphanumeric character (a character that is not a letter or a number such as *,_, or !). You can set three Membership provider attributes that determine password policy:

• minRequiredPasswordLength— The minimum required password length. (The default value is 7.)

• minRequiredNonalphanumericCharacters— The minimum number of non-alphanumeric characters (The default value is 1.)

• passwordStrengthRegularExpression— The regular expression pattern that a valid password must match (The default value is an empty string.)

The minRequiredNonAlphanumericCharacters attribute confuses everyone. Website users are not familiar with the requirement ...