Password Complexity

How it was found

Hi team, I observe this behaviour in your website and found poor password complexity forced when registering for an account. Here are the reprdouce steps below. Reproduce steps:

1.Open app.legalrobot-uat.com 2.Open registration form. 3.Fill all the fields but when going for a password write a password like this ''abcdefghijklmn'' 4.And your account was successfully created with this simple type of password and can easily be guessed. Fix Or Reccomendation: According to password policy for choosing a secure and complex password we must consider the following points in password policy: Passwords should use three of four of the following four types of characters: 1.Lowercase 2.Uppercase 3.Numbers 4.Special characters such as !@#$%^&*(){}[]

In reproduce steps you can see the password which is ''abcdefghijklmn''. there is no uppercase letter forced,no numbers forced and no special characters forced by your website. If you want to make your password complexity good your should consider these four points in your password field written above. i usually when visit other websites and go for registering an account and when writing a password in password i observe that these password complexity points are forced by the website and you cant make a password like ''abcdefghijklmn'' which can easily guessed by someone.

Hope you'll triage this. Thanks Regards: Husnain Iqbal