Can the complexity of the password be configured?

[Grant]

Hi, Can I change the complexity for username/password account? Like at least 8 characters, upper case/lower case/digits, etc?

Thanks!

Grant

[Bassam Ojeil]

Hey Grant,

The current minimum password length is 6 without any additional restrictions and cannot be modified.

Bassam

--
You received this message because you are subscribed to the Google Groups "Google Identity Toolkit" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-identity-t...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Grant]

Thanks Bassam. Another question, when I sign up users with password, can I add one more step of email verification of his new account? And can I add CAPTCHA to the sign up page?

Regards,

Grant

On Tuesday, June 14, 2016 at 6:55:24 PM UTC-5, Bassam Ojeil wrote:

Hey Grant,

The current minimum password length is 6 without any additional restrictions and cannot be modified.

Bassam

[Bassam Ojeil]

Hey Grant, after a user signs in, you can check if their email is verified, if not, redirect them to a page telling them in order to complete the sign in, they have to verify their email. You can create the email verification link using one of the backend libraries, for example:

https://github.com/google/identity-toolkit-python-client/blob/master/identitytoolkit/gitkitclient.py#L392

Email the link to the user's provided email. When the link is clicked, it will redirect to your widget page for confirmation. Using the backend libraries provided, you can check the gtoken cookie to confirm if the user is verified before you give the user access to your site.

As for CAPTCHA, you cannot force it to appear on demand.

Best regards,

Bassam

--