Currently, I am conducting some initial research for my school's IT department as a student employee. The students at our institution are required to change their passwords every six months, but many of them struggle with the various password regulations in place. This often leads to multiple attempts before successfully setting a new password.
The password rules include:
- Must be a minimum of 8 characters long
- Must contain three out of four types of characters (uppercase, lowercase, number, special character)
- Cannot include the user's first, last, or middle name
- Cannot include the user's username
- Cannot match any previous passwords
- User must input the password twice and they must match exactly
I have a few inquiries:
- Is it feasible to develop a web-based password checker that offers real-time feedback while users type in their new password? My idea involves a checklist on one side of the page where green checkmarks activate as more criteria are met.
- Can this checking process be completed securely and entirely on the client-side?
- Where should one begin when tackling such a project? Are there any recommended guides available?
Keep in mind that I do not possess web development skills. Also, kindly refrain from making any humorous remarks such as "change the password policy" or "they're just unintelligent users."