Skip to Content (Press Enter)
Community › Forge › Assets list › Generate Strong Password
generate-strong-password
Service icon

Generate Strong Password

Stable version 1.0.0 (Compatible with OutSystems 11)
Uploaded
 on 25 February 2022
 by 
2.5
 (2 ratings)
generate-strong-password

Generate Strong Password

Details
The GenerateStrongPassword function generates a random password string of desired length and with absolute certainty that the chosen character class requirements meet your password policy criteria.
Asset screenshot_0Asset screenshot_1Asset screenshot_2
Read more

The GenerateStrongPassword function generates a random password string of desired length and with the chosen character class requirements to meet your password policy criteria.

The component guarantees that for each chosen character class (numeric, lower case, upper case, special characters) at least one character will be present in the output password string.

Whereas other implementations, I noticed, only provide that possibility, which leaves a probability to generate a password without one or more of the desired character classes, resulting in failure on the password strength policy, if in place.

Release notes (1.0.0)
Reviews (1)
by 
16 Sep
in version 1.0.0
"Generate Strong Password" suggests to users that this component is capable of generating random passwords in accordance to cryptographic principles.
Unfortunately, this is not the case. This component uses SQL's RAND() function, which does not generate cryptographically secure random bytes.
In simple words: This component generates passwords, which are not hard to guess, but only follow statistical principles of random data.

As long as this is not clearly labelled (or the password generation is replaced by any actual cryptographically random password generation), I cannot recommend the use of this component.
Team
Other assets in this category