PHPackages                             georgringer/password-validation - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Validation & Sanitization](/categories/validation)
4. /
5. georgringer/password-validation

ActiveTypo3-cms-extension[Validation & Sanitization](/categories/validation)

georgringer/password-validation
===============================

Live server-side password policy feedback (password meter) for TYPO3 backend password fields.

10[1 issues](https://github.com/georgringer/password_validation/issues)PHP

Since Jul 10Pushed 1mo agoCompare

[ Source](https://github.com/georgringer/password_validation)[ Packagist](https://packagist.org/packages/georgringer/password-validation)[ RSS](/packages/georgringer-password-validation/feed)WikiDiscussions main Synced 1w ago

READMEChangelogDependenciesVersions (1)Used By (0)

🔐 Password Validation
=====================

[](#-password-validation)

Live, **server-side** password policy feedback (a "password meter") for TYPO3 backend password fields. As you type, each requirement of the configured password policy is checked and the requirement list turns green ✅ / red ❌ in real time — no more guessing why the record won't save.

[![Example](Resources/Public/Screenshot/example.png)](Resources/Public/Screenshot/example.png)

> ## ⚠️ Security warning — read this first
>
> [](#️-security-warning--read-this-first)
>
> This extension **sends the typed password to the server** (over your normal authenticated backend HTTPS connection) on every debounced keystroke, so the policy can be validated with the same server-side logic used on save.
>
> - The password is transmitted **in clear text within the request body** (like any normal login/save already does).
> - **HTTPS is enforced.** The meter only sends from a secure context (`window.isSecureContext` — HTTPS, or localhost in development), and the controller rejects any non-HTTPS request. Over plain HTTP nothing is sent and nothing is validated.
> - Do not install it if sending the in-progress password to the server is unacceptable in your threat model.

📦 Installation
--------------

[](#-installation)

Composer (recommended):

```
composer require georgringer/password-validation
```

⚙️ Configuration
----------------

[](#️-configuration)

None required. The meter uses the backend password policy configured in

```
$GLOBALS['TYPO3_CONF_VARS']['BE']['passwordPolicy']   // default: 'default'

```

Every backend `type=password` field that declares a `passwordPolicy` in its TCA automatically gets the live meter.

🧩 Compatibility
---------------

[](#-compatibility)

- TYPO3 **13.4 LTS** and **14.3**
- PHP 8.2+

📄 License
---------

[](#-license)

GPL-2.0-or-later

###  Health Score

15

—

LowBetter than 3% of packages

Maintenance40

Moderate activity, may be stable

Popularity2

Limited adoption so far

Community6

Small or concentrated contributor base

Maturity11

Early-stage or recently created project

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

### Community

Maintainers

![](https://www.gravatar.com/avatar/1d08c176686c8914d32c70d4af388887d738930fdfdf07c7ca9c841ad10ed683?d=identicon)[georgringer](/maintainers/georgringer)

---

Top Contributors

[![georgringer](https://avatars.githubusercontent.com/u/1905663?v=4)](https://github.com/georgringer "georgringer (1 commits)")

### Embed Badge

![Health badge](/badges/georgringer-password-validation/health.svg)

```
[![Health](https://phpackages.com/badges/georgringer-password-validation/health.svg)](https://phpackages.com/packages/georgringer-password-validation)
```

###  Alternatives

[drupal/coder

Coder is a library to review Drupal code.

3046.8M631](/packages/drupal-coder)[hyperf/validation

hyperf validation

122.2M213](/packages/hyperf-validation)[udokmeci/yii2-phone-validator

Modern Yii2 Phone validator wrapper on top of PhoneNumberUtil library also used by Android devices

36227.5k1](/packages/udokmeci-yii2-phone-validator)[yii2mod/yii2-validators

Collection of useful validators for Yii Framework 2.0

1817.0k](/packages/yii2mod-yii2-validators)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)