XF 1 [KL] Password Tools XF1 MOVED

Compatible XF 1.x versions
1.4, 1.5
License
MIT License
Visible branding
No
[KL] Password Tools
Description


Source

This modification mostly follows the principles of Dan Wheelers password strength estimator zxcvbn. It does not weight password strength by their combination of upper/lower letters, special characters and numbers, but on how easy they are to crack in reality.

To increase the safety of your users account, you can force them to use passwords of a minimum length, minimum strength and even force them to exclude certain words from their passwords (like your site name, the topic your site refers to, etc.).

zxcvbn Readme said:
zxcvbn is a password strength estimator inspired by password crackers. Through pattern matching and conservative entropy calculations, it recognizes and weighs 10k common passwords, common names and surnames according to US census data, popular English words, and other common patterns like dates, repeats (aaa), sequences (abcd), keyboard patterns (qwertyuiop), and l33t speak.

Consider using zxcvbn as an algorithmic alternative to password policy — it is more secure, flexible, and usable when sites require a minimal complexity score in place of annoying rules like "passwords must contain three of {lower, upper, numbers, symbols}".
Features

• Show users how strong their passwords really are when it comes to crack-attempts
• Deliver instant feedback if password and password-confirm match and/or certain requirements are not met
• Force users to choose passwords with a minimum strength
• Force users to choose passwords with a minimum length
• Force users to chooce a password not containing words from a blacklist you define
• No cheating: This modification also controls users passwords on server side with Ben Jeavos php-implementation of zxcvbn.
• Easy styling through XenForo Style Properties

(Un-)Installation
Installation

• Upload all content of the 'Upload'-Folder to your XenForo root folder. Overwrite files as necessary.
• Head to your XenForo-ACP -> Home -> Install Add-On
• Install the Add-On with the .xml-File that comes with it.

Uninstallation

• Head to your XenForo-ACP -> Home -> List Add-Ons
• Search for "[KL] Password Tools" and hit the red X on the right side of the list entry.
• Navigate to your XenForo-Root and delete the following folders:
  • library/KL/PasswordTools
  • js/KL/PasswordTools
• If this is your last/only Add-On of me, delete library/KL completely.

Upgrade

• Upload all contents of the 'Upload'-Folder to your XenForo root folder. Overwrite files as necessary.
• Head to your XenForo-ACP -> Home -> List Add-Ons
• Search for "[KL] Password Tools" and select "Upgrade Add-on" from the Controls-Dropdown
  
• Upgrade the Add-On with the .xml-File that comes with it.
• When Upgrading from a previous First-Dot-Release (X.x.x), check out the Patch Notes on the 'Updates'-Tab to receive information on additional steps that might need to be taken.

Incompatibilities
No known incompatibilities.