Home / ubuntu / Questions / 896448
In Process
John Rose
Asked: 2017-03-25 07:12:59 +0800 CST

Login password not good enough

  • 772

I tried to setup a login password using lower & upper case letters of the form User followed by numbers (where User is my User name and the password is thus composed of at least 8 characters). I've also tried initials with numbers. I keep on getting not good enough. I haven't been able to find a definitive set of rules for the login password. Could anyone point me to a definitive set of rules for login passwords?

16.04

2 Answers

  1. If you have no real interest in security you can avoid having to enter your password by having the system login automatically.

    If you however do want a secure password (which would be sensible in most cases) the following guidelines are recommended.

    Strong Passwords

Applications, and libraries exist for your Ubuntu system to assist in generating, or enforcing strong passwords. A strong password is defined as any password which meets the following criteria:

    At least fifteen (15) characters in length.
    Does not contain your user name, real name, organization name, family member's names or names of your pets.
    Does not contain your birth date.
    Does not contain a complete dictionary word.
    Is significantly different from your previous password.

    Should contain three (3) of the following character types.
        Lowercase Alphabetical (a, b, c, etc.)
        Uppercase Alphabetical (A, B, C, etc.)
        Numerics (0, 1, 2, etc.)
        Special Characters (@, %, !, etc.)

    Source: https://help.ubuntu.com/community/StrongPasswords

    Edit: If you want to enforce strong passwords or relax password requirements all this is configurable by editing /etc/security/pwquality.conf The file is heavily commented and pretty self-explanatory. Details on the respective options can be found on the man page

    • 5

  2. From https://help.ubuntu.com/lts/serverguide/user-management.html:

    By default, Ubuntu requires a minimum password length of 6 characters, as well as some basic entropy checks

    So it should be fine. If you have access to /etc/pam.d/common-password you could comment a word TEMPORARY and use it til you get your account properly set up. (If you don't I recommend a live cd)

    • 2