@mferraz Do you mean on this screen (see screenshot)? If so I can confirm that the feedback up is wrong. It says minimum 8 characters, but this is not true.

Screenshot 2025-02-03 at 11.40.29.png (90,307 bytes)   

Screenshot 2025-02-03 at 11.40.29.png (90,307 bytes)   

Hi.

That's right.

https://github.com/LimeSurvey/LimeSurvey/pull/4164

Before the fix, the error message showed all the rules, not just the one which was failing.
That was not very consistent with other parts of the code where password is being set.
Ex: application\controllers\UserManagementController.php :: actionApplyEdit()
Ex: User::ValidateNewPassword()
Now it shows only the rule that is failing.

It is to highlight that using the prior approach would only work for standard rules, not for rules set in the plugin: it is impossible to know the rules set in the plugin. For that there would have to be a new plugin event (or as workaround call the plugin empty password from User::getPasswordHelpText())

As a suggestion, I think the screen should show the rules in the screen it self before a password is submitted, calling the helptext method from the screen rendering.

It is to highlight that using the prior approach would only work for standard rules, not for rules set in the plugin: it is impossible to know the rules set in the plugin. For that there would have to be a new plugin event (or as workaround call the plugin empty password from User::getPasswordHelpText())

Plugin can not set value of checkPasswordStrength ?

Maybe report it as a new issue : my opinion : paswordPlugin can set (or update)

• checkPasswordStrength string
• getPasswordHelpText string

Fixed in Release 6.10.5+250217