PHPackages                             terminal42/contao-password-validation - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Validation & Sanitization](/categories/validation)
4. /
5. terminal42/contao-password-validation

ActiveContao-bundle[Validation & Sanitization](/categories/validation)

terminal42/contao-password-validation
=====================================

A Contao bundle that validates user passwords against your password policy

1.2.1(2mo ago)77.6k↑13.6%6[1 issues](https://github.com/terminal42/contao-password-validation/issues)MITPHPPHP ^8.2CI failing

Since Sep 11Pushed 2mo ago3 watchersCompare

[ Source](https://github.com/terminal42/contao-password-validation)[ Packagist](https://packagist.org/packages/terminal42/contao-password-validation)[ Docs](https://github.com/terminal42/contao-password-validation)[ GitHub Sponsors](https://github.com/terminal42)[ Fund](https://ko-fi.com/terminal42)[ RSS](/packages/terminal42-contao-password-validation/feed)WikiDiscussions main Synced 1mo ago

READMEChangelog (10)Dependencies (28)Versions (18)Used By (0)

terminal42/contao-password-validation
=====================================

[](#terminal42contao-password-validation)

A Contao bundle that validates user passwords against your password policy.

Features
--------

[](#features)

- Validate a password against your organization policies
- Force members to do a password-change

Installation
------------

[](#installation)

Choose the installation method that matches your workflow!

### Installation via Contao Manager

[](#installation-via-contao-manager)

Search for `terminal42/contao-password-validation` in the Contao Manager and add it to your installation. Finally, update the packages.

### Manual installation

[](#manual-installation)

Add a composer dependency for this bundle. Therefore, change in the project root and run the following:

```
composer require terminal42/contao-password-validation
```

Depending on your environment, the command can differ, i.e. starting with `php composer.phar …` if you do not have composer installed globally.

Then, update the database via the Contao install tool.

Configuration
-------------

[](#configuration)

### Password validation

[](#password-validation)

Add the following configuration parameters to your `app/config/config.yml`:
(Skip options that you do not need)

```
terminal42_password_validation:
  Contao\FrontendUser:
    min_length: 10
    max_length: 20
    require:
      uppercase: 1
      lowercase: 1
      numbers: 1
      other: 1
    other_chars: "+*ç%&/()=?"
    password_history: 10
    change_days: 90
    haveibeenpwned: 1
  Contao\BackendUser:
    min_length: 10
    haveibeenpwned: 1
```

ParameterPurpose`password_history`:Keep track of the latest `n` passwords, and force the users not to choose one of their recent passwords.`change_days`:Ask the user to change their password after certain days.`haveibeenpwned`:Check the user password against known data breaches reported to [';--have i been pwned?](https://haveibeenpwned.com/). The configuration allows you to specify an integer to define the [minimum number of data breaches](https://haveibeenpwned.com/API/v3#SearchingPwnedPasswordsByRange) the password needs to occur in to fail password validation.### Password-change

[](#password-change)

1. Create a "password-change" page and place a password-change module on it. Select this page as password-change page in the page root.
2. You can now force members to change their passwords by ticking the corresponding checkbox in the member edit-mask.

Add your own password validator
-------------------------------

[](#add-your-own-password-validator)

You can add your own validation rule, e.g. a dictionary check.

Create a class that implements `PasswordValidatorInterface`. Then, create and tag a corresponding service.

```
  app.password_validation.validator.dictionary:
    class: App\PasswordValidation\Validator\Dictionary
    tags:
      - { name: terminal42_password_validation.validator, alias: dictionary }

```

License
-------

[](#license)

This bundle is released under the [MIT license](LICENSE)

###  Health Score

57

—

FairBetter than 98% of packages

Maintenance85

Actively maintained with recent releases

Popularity32

Limited adoption so far

Community19

Small or concentrated contributor base

Maturity79

Established project with proven stability

 Bus Factor1

Top contributor holds 77.6% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~148 days

Recently: every ~393 days

Total

17

Last Release

61d ago

PHP version history (4 changes)1.0.0PHP ^7.1

1.0.8PHP >=7.1

1.1.1PHP ^7.1 || ^8.0

1.2.0PHP ^8.2

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/1073273?v=4)[Andreas Schempp](/maintainers/aschempp)[@aschempp](https://github.com/aschempp)

![](https://avatars.githubusercontent.com/u/481937?v=4)[Yanick Witschi](/maintainers/Toflar)[@Toflar](https://github.com/Toflar)

---

Top Contributors

[![richardhj](https://avatars.githubusercontent.com/u/1284725?v=4)](https://github.com/richardhj "richardhj (45 commits)")[![aschempp](https://avatars.githubusercontent.com/u/1073273?v=4)](https://github.com/aschempp "aschempp (8 commits)")[![fritzmg](https://avatars.githubusercontent.com/u/4970961?v=4)](https://github.com/fritzmg "fritzmg (1 commits)")[![taca](https://avatars.githubusercontent.com/u/384611?v=4)](https://github.com/taca "taca (1 commits)")[![zonky2](https://avatars.githubusercontent.com/u/1045318?v=4)](https://github.com/zonky2 "zonky2 (1 commits)")[![qzminski](https://avatars.githubusercontent.com/u/193483?v=4)](https://github.com/qzminski "qzminski (1 commits)")[![flyer303](https://avatars.githubusercontent.com/u/31103450?v=4)](https://github.com/flyer303 "flyer303 (1 commits)")

---

Tags

validationpasswordcontao

### Embed Badge

![Health badge](/badges/terminal42-contao-password-validation/health.svg)

```
[![Health](https://phpackages.com/badges/terminal42-contao-password-validation/health.svg)](https://phpackages.com/packages/terminal42-contao-password-validation)
```

###  Alternatives

[sylius/sylius

E-Commerce platform for PHP, based on Symfony framework.

8.4k5.6M651](/packages/sylius-sylius)[sulu/sulu

Core framework that implements the functionality of the Sulu content management system

1.3k1.3M152](/packages/sulu-sulu)[shopware/platform

The Shopware e-commerce core

3.3k1.5M3](/packages/shopware-platform)[contao/core-bundle

Contao Open Source CMS

1231.6M2.4k](/packages/contao-core-bundle)[shopware/core

Shopware platform is the core for all Shopware ecommerce products.

595.2M386](/packages/shopware-core)[codefog/contao-haste

haste extension for Contao Open Source CMS

42650.8k139](/packages/codefog-contao-haste)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)