require randomized passwords

Driesp

Verified User
Joined
Mar 12, 2007
Messages
190
Location
Belgium
Hi all

A couple of years ago, I have made a feature request suggestion on feedback.directadmin.com.
Many hosting providers only allow users to receive a at random generated password when changing or configuring e-mail accounts, ftp accounts, databases,...
This prevents users from choosing a too easy password or a password they already use elsewhere.
By only allowing a randomly generated password, they are unique and strong.
This will greatly improve the security of the server/network.

E-mail accounts are configured fixed into a device, databases are configured into a configuration file, ftp password can be remembered in the ftp client.
DirectAdmin passwords can be remembered in the webbrowser or in a password database.

Today, it is still impossible to use 2factor authentication on e-mail accounts or ftp accounts (or databases).
This is an extra reason why we should prevent users from setting their own passwords.

I would suggest an extra configuration option like this:
require_randomized_passwords=yes

Please give your +1 here:

Kind regards
Dries
 
Last edited:
Hi all

I want to bump up this topic.

I hope this feature can be implemented in DirectAdmin. It will greatly improve the security of the servers and network.

Kind regards
Dries
 
Back
Top