kotovalexarian-likes-gitlab/gitlab-org--gitlab-foss
1
0
Fork 0
Code Releases Activity
gitlab-org--gitlab-foss/doc/security/password_length_limits.md

3.1 KiB
Raw Blame History

stage group info type
Manage Access To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments reference, howto

Custom password length limits (FREE SELF)

By default, GitLab supports passwords with the following lengths:

  • Minimum: 8 characters
  • Maximum: 128 characters

GitLab administrators can modify password lengths:

  • Using the GitLab UI. From GitLab 12.6, this is the only available option.
  • Using configuration file. Up to GitLab 12.5.

Changing the minimum or maximum length does not affect existing user passwords. Existing users are not asked to reset their password to adhere to the new limits. The new limit restriction applies only during new user sign-ups and when an existing user performs a password reset.

Modify minimum password length using GitLab UI

Introduced in GitLab 12.6

The user password length is set to a minimum of 8 characters by default.

To change the minimum password length using GitLab UI:

  1. On the top bar, select Menu > Admin.

  2. On the left sidebar, select Settings > General and expand Sign-up restrictions.

    Minimum password length settings

  3. Enter a Minimum password length value greater than or equal to 8.

  4. Select Save changes.

Modify maximum password length using configuration file

From GitLab 12.6, the minimum password length set in this configuration file is ignored. Minimum password lengths must instead be modified via the GitLab UI.

The user password length is set to a maximum of 128 characters by default. To change that for installations from source:

  1. Edit devise_password_length.rb:

    cd /home/git/gitlab
sudo -u git -H cp config/initializers/devise_password_length.rb.example config/initializers/devise_password_length.rb
sudo -u git -H editor config/initializers/devise_password_length.rb

  2. Change the new password length limits:

    config.password_length = 12..135

    In this example, the minimum length is 12 characters, and the maximum length is 135 characters.

  3. Restart GitLab for the changes to take effect.