Skip to content

Block weak passwords by default by removing the feature flag

Nick Malcolm requested to merge 363445-remove-block-weak-passwords-ff into master

What does this MR do and why?

In Prevent users from choosing weak passwords (#23610 - closed) we introduced a feature that prevents users from choosing weak passwords behind a default disabled feature flag. This MR removes the feature flag and enables blocking weak password behavior globally.

Documentation for this feature is available at https://docs.gitlab.com/ee/user/profile/user_passwords.html#block-weak-passwords

This completes the "Prevent users from choosing weak passwords" epic and closes the rollout issue "[Feature flag] Enable blocking weak passwords ".

Screenshots or screen recordings

Here's the feature on GitLab.com:

Screen_Recording_2022-11-11_at_1.14.05_PM

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #363445 (closed)

Edited by Nick Malcolm

Merge request reports