Custom Password Strength Check

[SandeepKSingh]

Scenario:

I am asked to develop a Script Include that validates the password strength based on the following conditions:

1. Minimum length: 8 characters

2. Must contain at least one uppercase letter

3. Must contain at least one lowercase letter

4. Must contain at least one number

5. Must contain at least one special character

If the password does not meet these requirements, it should be flagged as “Weak Password”, otherwise as “Strong Password.”


How we can achieve this ?

[vignesh parthib · Accepted solution]

Hi @SandeepKSingh 

If your looking for custom approach, you can try this

function validatePasswordStrength(password) {
    // Regular expressions for validation
    var minLength = password.length >= 8;
    var hasUppercase = /[A-Z]/.test(password);
    var hasLowercase = /[a-z]/.test(password);
    var hasNumber = /[0-9]/.test(password);
    var hasSpecialChar = /[!@#$%^&*(),.?":{}|<>]/.test(password);

    if (minLength && hasUppercase && hasLowercase && hasNumber && hasSpecialChar) {
        return "Strong Password";
    } else {
        return "Weak Password";
    }
}

Thanks,
Vignesh
"If this solution resolves your issue, kindly mark it as correct."

[Bhuvan · Accepted solution]

@SandeepKSingh 

Can you try the following for scripting,

https://www.servicenow.com/docs/bundle/washingtondc-platform-security/page/script/server-scripting/t...

You can configure the validation using Policies for latest release,

https://www.servicenow.com/docs/bundle/zurich-platform-security/page/integrate/authentication/task/e...

If this helped to answer your query, please mark it helpful & accept the solution.

Thanks,

Bhuvan

[vignesh parthib · Accepted solution]

Hi @SandeepKSingh 

If your looking for custom approach, you can try this

function validatePasswordStrength(password) {
    // Regular expressions for validation
    var minLength = password.length >= 8;
    var hasUppercase = /[A-Z]/.test(password);
    var hasLowercase = /[a-z]/.test(password);
    var hasNumber = /[0-9]/.test(password);
    var hasSpecialChar = /[!@#$%^&*(),.?":{}|<>]/.test(password);

    if (minLength && hasUppercase && hasLowercase && hasNumber && hasSpecialChar) {
        return "Strong Password";
    } else {
        return "Weak Password";
    }
}

Thanks,
Vignesh
"If this solution resolves your issue, kindly mark it as correct."

[Bhuvan · Accepted solution]

@SandeepKSingh 

Can you try the following for scripting,

https://www.servicenow.com/docs/bundle/washingtondc-platform-security/page/script/server-scripting/t...

You can configure the validation using Policies for latest release,

https://www.servicenow.com/docs/bundle/zurich-platform-security/page/integrate/authentication/task/e...

If this helped to answer your query, please mark it helpful & accept the solution.

Thanks,

Bhuvan

[Ankur Bawiskar]

@SandeepKSingh 

no scripting required, you can handle this with OOTB configuration

Configure the required strength for passwords 

Configure your password policy 

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Ravi Gaurav · Accepted solution]

Hi @SandeepKSingh 

you can use the below in script include:-

ckStr: function(pwd) {
if (!pwd) return "Empty password!";

var strong = pwd.length >= 8 &&
/[A-Z]/.test(pwd) &&
/[a-z]/.test(pwd) &&
/[0-9]/.test(pwd) &&
/[^A-Za-z0-9]/.test(pwd);

return strong ? "Strong Password" : "Weak Password";
},