spooner-web/be_secure_pw

You can set password conventions to force secure passwords for BE users.

10.2.1 2025-02-06 12:42 UTC

Requires

• php: >= 7.4, < 8.4
• typo3/cms-beuser: ^11.5
• typo3/cms-core: ^11.5
• typo3/cms-setup: ^11.5

Requires (Dev)

• phpstan/extension-installer: ^1.1
• saschaegerer/phpstan-typo3: ^1.1
• ssch/typo3-rector: ^1.0
• typo3/coding-standards: ^0.5.0
• typo3/testing-framework: ^6.0

Replaces

• typo3-ter/be-secure-pw: *

GPL-2.0-or-later

• Thomas Löffler

• security
• pattern
• extension
• password
• typo3
• reminder

README

tldr

This extension keeps the editor's password safe and secure

What does it do?

This extension

• can set different patterns for the BE user's password
  • capital chars
  • lower chars
  • digits
  • special chars
  • and set the number of patterns a password must have
• can set a minimum length of a password
• is checking the password in setup module and in BE user record
• is able to set a period of time a password becomes expired and a BE user needs to change it
• is able to force this password change
  • a BE user with an expired password has only access to the setup module
• is able to lookup in the pawned password database if the password is found in data breaches

How to install?

composer

composer require spooner-web/be_secure_pw

TYPO3 Extension Manager

Search for be_secure_pw and install it via the EM interface

ZIP upload in EM

Go to the TER page and download the ZIP file. After that, upload it in your TYPO3 Backend in the EM interface.

How to contribute?

• Send issues (bugs, suggestions, features)
• Donate via PayPal
• Send code and create Merge Requests in GitLab

Credits

• Lightwerk GmbH and its customer who wants such a solution for password
• Torben Hansen for the code of PawnedPasswordService
• All other contributors