How can I set password strength for IBM Cloud App ID?

Question

I am using the IBM Cloud App ID service and its Cloud Directory to manage users for my web app. I have a form where users can sign up for the app by providing an username and a password. By default, App ID requires 8 characters minimum for a valid password. How can I change it and adapt it to "my" rules?

Answer 1

App ID allows you to set your own password strength policy through the management APIs. You can supply App ID with a regex, that any new passwords will be validated against. This way you can enforce any rules you require.

You can set it using this API: https://appid-management.ng.bluemix.net/swagger-ui/#!/Config/set_cloud_directory_password_regex

A typical policy pattern in JSON format could be:

{
  "regex": "^.{8,}$",
  "error_message": "The password must contain at least 8 characters"
}