Name: Force Password Complexity (FPC)
Version: 5.2.0.0-PRO (Joomla! 5) / 4.2.1.0-PRO (Joomla! 4) / 3.2.2.0-PRO (Joomla! 3)
Type: Plugin
License: GPLv3
Description: Force Password Complexity checks entered passwords and rejects weak passwords.
Download: FPC - Force Password Complexity Downloads
Strong passwords are enforced based on individual rules with this plugin
Plugin: FPC - Force Password Complexity
Function: Increase of the overall security of the system by good, strong passwords.
Languages: English and German
The system plugin checks the user passwords using defined security patterns and rejects weak passwords. In this way FPC ensures stronger security of the whole system. The execution of the plugin and the checks of the passwords can be set completely customized to ensure an own standard of security. There is also an option to allow weak passwords for certain user groups, but to inform them by a warning about the weak password. This option should only be used for non-critical user groups.
Features
- Force secure, good passwords with individual rules
- Suggest a password that fits the seurity criteria (PRO)
- Set precise execution rules:
- Execution in front- and / or backend
- Restrict to specific user groups
- Restriction with warning notice for unselected groups possible
- Check the type of users - only new, existing or all users
- Individual checks for secure passwords:
- Minimum length of passwords
- Minimum size of the entropy of passwords
- Forbid parts of the name and the e-mail address
- Maximum number same and same consecutive characters
- Force character types: uppercase / lowercase letters, numbers and special characters
- Plugin is small and fast, doesn't need a big framework
- Fast, clean code
- Languages: English and German
Installation
Install the plugin in the backend. Configure and activate it in Extensions -> Plugins -> System - Force Password Complexity - FPC.
The settings of FPC are divided into two parts: Execution and Checks.
Under Execution you may change the settings, how and where the plugin is executed. The application can be restricted to the front- and / or backend, on specific user groups and the status of the user. Additionally you may show a warning, to not specified users, that the entered password has been saved but it has been evaluated by the system to be insecure.
Under Checks you may define individual check patterns to guarantee secure passwords. You may define a minimum length and entropy of the password. Entropy is a measure of the uncertainty in a random variable. The higher the number, the better (more complex) the password. You have the ability to forbid parts of the name or the email address upon creation of the password. The options to restrict the maximum number of equivalent or consecutive characters avoid very weak passwords with few or repeating characters. Another important option is the ability to define which characters must be integrated at least once into the password. Here you have the options for upper- and lowercase letters, numbers and special characters (multiple selection is possible and recommended).
Changelog
Latest release
Version 5.2.0.0-PRO - 2025-01-12
- + Increased technical requirements for Joomla! 5: Increasing Technical Requirements 2025 - Core & PHP for Joomla! Pro Extensions
- + Optimising code to meet new requirements can enhance its quality, performance, and security.
Version 5.2.0.0-PRO - 2025-01-12
- + Increased technical requirements for Joomla! 5: Increasing Technical Requirements 2025 - Core & PHP for Joomla! Pro Extensions
- + Optimising code to meet new requirements can enhance its quality, performance, and security.
Version 5.1.0.0-PRO - 2024-06-13
- + The dynamic password meter is updated automatically to the length of the password length option from the plugin, not the value from the user component.
- + Subscriber Interface: The plugin has been rewritten to utilise the subscriber interface, enhancing its integration and performance capabilities.
- + Improved Pro Security Token validation check. The Pro package contains a token file with an individual security token linked to the user account that is checked against the validation server for authenticity. If the file is missing or the token is invalid, you cannot edit the settings and use the extension. The Pro Security Token field has been extended to handle incorrect tokens and blocked accounts. If you encounter an error message related to the token, download the Pro version with your Pro subscription from the linked download page and install it again!
- Attention: The Pro extension will not work correctly if the token file or custom field is missing or modified. Never edit or remove the files to ensure correct functionality.
Version 5.0.0.0-PRO - 2023-12-06
- + First Pro release for Joomla! 5.x based on FPC Pro version 4.2.0.0-PRO
- + The plugin "Behaviour - Backward Compatibility" is not required. The extension only uses supported classes in Joomla! 5.
Version 4.2.1.0-PRO - 2024-07-30
- Increased technical requirements for Joomla! 4: Increasing Technical Requirements 2024 - Core & PHP for Joomla! 4 Pro Extensions.
- ^ Updated the installation script to enable the uninstall process in higher core versions.
Version 4.2.0.0-PRO - 2023-10-12
- + Improved Installation Script: Updated the installation script to check for the highest compatible version of Joomla automatically! This feature aims to prevent issues that may arise from using incompatible core versions, thereby ensuring a smoother installation process.
Version 4.1.0.0-PRO - 2023-04-05
- Increased technical requirements for Joomla! 4: Increasing Technical Requirements - Core & PHP for Joomla! 4 Pro Extensions.
- + Code optimisations.
Version 4.0.2.0-PRO - 2022-10-17
- + Added Pro Security Token validation check. The Pro package contains a token file with an individual security token linked to the user account and checked against the validation server for authenticity.
- ^ Multiple internal code optimisations.
Version 4.0.1.0-PRO - 2021-11-14
- + Added the built-in Download Key Manager support to enter your Pro Update ID without installing the update helper plugin.
Important: Please copy your personal Pro Update ID using the second copy button in the Pro ID Manager and enter the key in System - Update - Update Sites - Select the entry of the Pro extension and enter the ID into the Download Key field. - ^ Code optimisations
Version 4.0.0.0-PRO - 2021-09-16
- + First Pro release for Joomla! 4.x based on FPC Pro version 3.2.2.0-PRO
Version 3.2.2.0-PRO - 2021-06-12
- ^ Maintenance release
- ^ Changed the version number specification. The first number stands for the supported major Joomla! version. The following three numbers follow the Semantic Versioning Specification (SemVer), as it used to be previously.
- ^ Updated custom field
- ^ Code optimisations
Version 3.2.1-PRO - 2021-01-17
- ^ Maintenance release
Version 3.2.0-PRO - 2020-04-09
- First release with increased technical requirements: Increasing Technical Requirements - Joomla! Core & PHP for Pro & Free Extensions
- + Suggest Password - Suggests a password that fits the security criteria if password check fails.
- ^ Code Optimizations
- ^ Updated Language Strings
- ^ Updated Custom Fields
Version 3.1.1 - 2016-02-21
- + Code Refactoring
- ^ Updated Language Files
Version 3.1.0 - 2015-08-01
- + Donation Code Validation Process - Improved the validation process with a new server (HTTPS request) plus an independent, separated fallback server (HTTP request).
https://check.kubik-rubik.de/
http://check.kubik-rubik.eu/
https://downloads.kubik-rubik.de/
Version 3-2 - 2015-02-05
- + Update Server - Added the Joomla! core functionality for the update checks
- ^ Updated Donation Code field - Uses the HTTP API for the requests and calls the check script via HTTPS
- ^ Links in the language files - Updated outdated links to the JED (Joomla! Extensions Directory)
- ! Removed Version Check field
Version 3-1 - 2013-12-15
- First release for Joomla! 3.x.
- This release is tested only with Joomla! 3.2 - do not use it in a lower Joomla! version. Do not report any problems with other Joomla! versions. Only the mentioned version is supported officially!
Version 2.5-2 - 2013-05-21
- ^ Output of option "Password must contain" - all needed character types are displayed in the error message, not only the missing one
Version 2.5-1 - 26-Feb-2013
+ First version for Joomla! 2.5
Download
Overview of all downloads of the extension: FPC - Force Password Complexity Downloads