Forum Discussion

chopin70's avatar
chopin70
Virtuoso
Nov 09, 2020

New password is weak message on creating users

Hi,

Since more than a year, I notices this message when ever I create a new user or save changes to an existing user:

The attached images are broken !

Text of message is: 

The new password is weak, and will reduce the security of your system.
Recommended passwords contain at least 8 characters, one uppercase,
one lowercase, one number, and one special character. Do you want to apply it anyway?

 

I was living with it, but now I am wondering why ?

I tried all password combinations respecting the rules in message and trying different special chars, but it always shows

Is it a bug ?

 

 

6 Replies

Replies have been turned off for this discussion
  • Edited my post with the image attached as the forum seems broken with embedded images

  • StephenB's avatar
    StephenB
    Guru - Experienced User

    chopin70 wrote:

    Hi,

     

    The new password is weak, and will reduce the security of your system.
    Recommended passwords contain at least 8 characters, one uppercase,
    one lowercase, one number, and one special character. Do you want to apply it anyway?

     

    I tried all password combinations respecting the rules in message and trying different special chars, but it always shows

    Is it a bug ?

     


    Qwe#1234 doesn't trigger the message on my system (running 6.10.3).  I substituted a couple of other special characters for the #, and didn't see the message either.

     

    If you post a sample password that fails on your system, I can check it on mine.

     

     

    • chopin70's avatar
      chopin70
      Virtuoso

      In fact, yours is fine

      here's one that fails:

      f587dTr-xfT

      I think that any special character like -, *... will cause the message

      However, if I login as user :

      su - user_name

      the password with all the special chars is accepted. So it was properly saved

       

      Seems like a bug in the GUI when accepting passwords with some characters

       

      • StephenB's avatar
        StephenB
        Guru - Experienced User

        chopin70 wrote:

        here's one that fails:

        f587dTr-xfT

        I think that any special character like -, *... will cause the message

         


        It fails on my system too. f587dTr^xfT is accepted though.

         

        It looks like they are excluding some special characters - it'd be nice if JohnCM_S or Marc_V could tell us which ones.

         


        chopin70 wrote:

        So it was properly saved


        Yes.  It's a warning, and it will accept passwords that fail its strength check.

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More