You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
For email validation haveibeenpwned suggested by the docs offers a limited free plan .
I found mailchecker which doesn't do the same job as haveibeenpwned but rather validates if the email is not a temporary/spam mail which can be a start(still checking the package).
Create a new PasswordStrength component to display the strength of a password from 0-4 (a segmented bar with a label and color, something like this)
Display the new component beneath the password input for registration
Initialize the zxcvbn-ts library and hook up the password strength to the component
Display warnings and suggestions returned from the library in a banner to help the user pick a stronger password (example API response)
Prevent registration if the password is too insecure (maybe scores below 3?)
evadecker
changed the title
Add password requirements and other signup validation logic
Add password strength requirements during registration
Dec 20, 2024
evadecker
changed the title
Add password strength requirements during registration
Add password strength requirements during registration and password reset
Dec 21, 2024
We should implement password requirements to reduce the risk of phishing and account loss.
https://labs.convex.dev/auth/config/passwords#customize-sign-up-form-validation
The text was updated successfully, but these errors were encountered: