Mailcow-dockerized: Password generator ignoring password policy

[DatAres37]

Not sure if this is a bug or a feature request tbh, but if you manually change the password policy, the password generator for new accounts ignores those policies, thus generates invalid passwords.

[andryyy]

Oh. That's a good catch.

[Adorfer]

BTW: Would be nice to have xkdcpass as an option for those autogenerated passwords
https://github.com/redacted/XKCD-password-generator

for "every day use" i like something like
xkcdpass -v [a-z,A-Z] --max=8 -w /usr/share/dict/words -n 4

[JPaulMora]

Also, the default generator is very insecure 8 lowercase letters + 2 numbers.

[andryyy]

Not really. You gain nothing with unreadable passwords with a length of 16 chars. People will write them down or save them in a passwords.txt.

I learned it is much better to create easy-to-remember default passwords. You can always change the policy in vars.inc.php (or better vars.local.inc.php) or generate super long, special char passwords yourself.