User Tools

Site Tools


reference:password_strength_checking_script

This is an old revision of the document!


Password Strength Checking Script

You can tell VPOP3 to enforce password strength checks by using a Lua script which performs the checks for you.

The Lua script is stored in a file called passwordcheck.lua in the VPOP3 directory. VPOP3 calls a function called Check which should have the following prototype:

Check(<username>, <password>, <min password length>)

(where '<min password length>' is the minimum length set in Settings → Security in the VPOP3 settings)

This function should return a boolean value to say whether the password is allowed or not (true = allowed, false = not allowed)

A simple example to prevent the password being the same as the username or 'password' would be:

function Check(Username, Password, minlength)
 if Password == Username or Password == 'password' then
  return false
 else
  return true
 end
end

If you need, we can produce a script for you, but there would be a cost for this - contact support@pscs.co.uk with a specification for a quote. (The price is usually £50 + VAT for a simple case)

reference/password_strength_checking_script.1393522198.txt.gz · Last modified: 2018/11/14 10:44 (external edit)