Skip to content

How To: Set up simple password complexity requirements

Ivan Bajalovic edited this page Jul 19, 2016 · 13 revisions

June 2016:

Here is a simple method of adding a password strength / complexity requirement to devise without using devise security extension (using extension is recommended.)

Example: add the following line to user.rb in app/models directory. Edit Regex to your liking

  validate :password_complexity
  def password_complexity
    if password.present?
       if !password.match(/^(?=.*[a-z])(?=.*[A-Z])/) 
         errors.add :password, "Password complexity requirement not met"
       end
    end
  end

Afterwards, password created by the user, admin must meet the regex requirements.

Clone this wiki locally