Differences

This shows you the differences between two versions of the page.

--- plugin:passpolicy [2015-03-19 06:39] – 37.200.79.25
+++ plugin:passpolicy [2022-01-11 23:50] (current) – version upped andi
@@ Line 6: / Line 6: @@
 email      : andi@splitbrain.org
 type       : action, helper
-lastupdate : 2015-01-09
+lastupdate : 2022-01-11
-compatible : Weatherwax,Binky,2014-05-05 "Ponder Stibbons", Hrun
+compatible : Greebo, Hogfather
 depends    :
 conflicts  :
@@ Line 23: / Line 23: @@
 ===== Installation =====
-Install the plugin using the [[plugin:plugin|Plugin Manager]] and the download URL above, which points to latest version of the plugin. Refer to [[:Plugins]] on how to install plugins manually.
+Search and install the plugin using the [[plugin:extension|Extension Manager]]. Refer to [[:Plugins]] on how to install plugins manually.
-Please note that the Plugin needs the Hotfix-Version //2013-05-10a "Weatherwax"// of DokuWiki.
 ==== Changes ====
@@ Line 31: / Line 30: @@
 {{rss>https://github.com/splitbrain/dokuwiki-plugin-passpolicy/commits/master.atom date}}
 ===== Features =====
@@ Line 42: / Line 42: @@
 Passwords can also be checked against a list of the 10,000 most commonly used ones.
+Passwords can also be checked anonymously against the [[https://haveibeenpwned.com/Passwords|haveibeenpwned passwords API]].
 Configuration is done in the Config Manager.
@@ Line 62: / Line 64: @@
 The plugin adds a simple password strength indicator to all forms where new passwords can be set by the user or administrator.
+==== Account Hint Suppression ====
+By default, DokuWiki tries to be user friendly and will tell users when a given account in the password reset mechanism does not exists. This is to avoid frustrations where you wait for a mail that will never come because you entered a wrong user name.
+Some people consider this a security risk as it allows to automatically figure out if certain usernames exist or not.
+This plugin offers an option to suppress these kind of user friendly hints.