Skip to content

Commit aa1d904

Browse files
authored
feat: list allowed symbols for password security (supabase#36470)
* feat: list allowed symbols for password security * fix: formatting
1 parent ef20349 commit aa1d904

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

apps/docs/content/guides/auth/password-security.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ There are hundreds of millions (and growing!) known passwords out there. Malicio
2323
To help protect your users, Supabase Auth allows you fine-grained control over the strength of the passwords used on your project. You can configure these in your project's [Auth settings](/dashboard/project/_/auth/providers?provider=Email):
2424

2525
- Set a large minimum password length. Anything less than 8 characters is not recommended.
26-
- Set the required characters that must appear at least once in a user's password. Use the strongest option of requiring digits, lowercase and uppercase letters, and symbols.
26+
- Set the required characters that must appear at least once in a user's password. Use the strongest option of requiring digits, lowercase and uppercase letters, and symbols. The allowed symbols are: ``!@#$%^&*()_+-=[]{};'\:"|<>?,./`~``
2727
- Prevent the use of leaked passwords. Supabase Auth uses the open-source [HaveIBeenPwned.org Pwned Passwords API](https://haveibeenpwned.com/Passwords) to reject passwords that have been leaked and are known by malicious actors.
2828

2929
<Admonition type="note">

0 commit comments

Comments
 (0)