Skip to content

Password strength indicator shows "No Password" even when a password is entered #19071

@cSkip

Description

@cSkip

The password strength indicator shows "No Password" at times when there is a password entered.

Preconditions (*)

  1. Anywhere where the password strength indicator is being used.

  2. Customer password settings:

screen shot 2018-11-05 at 2 58 51 pm

Passwords that are too guessable or risky will return a 0 zxcvbnScore see Here. e.g when "password" is entered as the actual password.

Steps to reproduce (*)

  1. At the account register page, type "password" in the password field.

Expected result (*)

  1. An expected result would likely be a Weak Password message.

Actual result (*)

screen shot 2018-11-05 at 11 46 08 am

  1. the message with display "No Password".

In this scenario the issue is that the javascript is not handling a return value of "0" from xcsvbn(password) differently than an empty password.

I am currently running Magento v2.2.5

Metadata

Metadata

Assignees

Labels

Component: CustomerFixed in 2.2.xThe issue has been fixed in 2.2 release lineFixed in 2.3.xThe issue has been fixed in 2.3 release lineIssue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedIssue: Format is validGate 1 Passed. Automatic verification of issue format passedIssue: Ready for WorkGate 4. Acknowledged. Issue is added to backlog and ready for developmentReproduced on 2.2.xThe issue has been reproduced on latest 2.2 releaseReproduced on 2.3.xThe issue has been reproduced on latest 2.3 release

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions