From e88704017e327a4534b22f477edea8fb653c50b1 Mon Sep 17 00:00:00 2001 From: Finn Stutzenstein Date: Fri, 23 Oct 2026 19:23:37 +0000 Subject: [PATCH] Raise the minimum password length to 20 characters The initial admin password of setup-prod-initial-login is now admin-initial-password. Co-Authored-By: Claude Opus 5.5 --- Makefile | 2 +- max/auth/password_policy.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile b/Makefile index 80a6111..591b202 100644 --- a/Makefile +++ b/Makefile @@ -43,4 +43,4 @@ stop-prod: setup-prod-initial-login: docker-compose exec max flask add-domain finn.st - docker-compose exec max flask reset-admin admin@finn.st admin-initial + docker-compose exec max flask reset-admin admin@finn.st admin-initial-password diff --git a/max/auth/password_policy.py b/max/auth/password_policy.py index f50b71a..b01f5a1 100644 --- a/max/auth/password_policy.py +++ b/max/auth/password_policy.py @@ -1,6 +1,6 @@ from .hashing import MAX_PASSWORD_BYTES, is_password_too_long -MIN_PASSWORD_LENGTH = 12 +MIN_PASSWORD_LENGTH = 20 PASSWORD_TOO_SHORT_MESSAGE = ( "The password must be at least {min_length} characters long"