A collection of django password validators

A collection of django password validators.

Compatibility

• Python: 3.6, 3.7, 3.8, 3.9, 3.10
• Django: 3.2, 4.0

Installation

For translations to work, add django_pwned to INSTALLED_APPS.

TL;DR:

AUTH_PASSWORD_VALIDATORS = [
    {"NAME": "django.contrib.auth.password_validation.UserAttributeSimilarityValidator"},
    {"NAME": "django_pwned.validators.GitHubLikePasswordValidator"},
    {"NAME": "django_pwned.validators.MinimumUniqueCharactersPasswordValidator"},
    {"NAME": "django_pwned.validators.PwnedPasswordValidator"},
]

Validators

PwnedPasswordValidator(request_timeout=1.5)

This validator uses the Pwned Passwords API to check for compromised passwords.

Internally, this validator checks password with django’s
CommonPasswordValidator and if password was not in django’s list,
uses Pwned API to check password. So you can remove CommonPasswordValidator
if you’re using this validator.

To finish reading, please visit source site