javascript regex for password containing at least 8 characters, 1 number, 1 upper and 1 lowercase

Question

I am trying to write a regular expression to validate a password which must meet the following criteria:

Contain at least 8 characters
contain at least 1 number
contain at least 1 lowercase character (a-z)
contain at least 1 uppercase character (A-Z)
contains only 0-9a-zA-Z

I tried the following but it doesn't seem to work.

http://jsfiddle.net/many_tentacles/Hzuc9/

<input type='button' value='click' class='buttonClick' />
<input type='text' />
<div></div>

and...

$(".buttonClick").click(function () {

    if ($("input[type=text]").filter(function () {
        return this.value.match(/^(?=.*[0-9])(?=.*[a-z])(?=.*[A-Z])([a-zA-Z0-9]{8})$/);
    })) {
        $("div").text("pass");
    } else {
        $("div").text("fail");
    }

});

Any ideas?

solution refer: https://www.aspforums.net/Threads/103764/Password-validation-using-regular-expression-in-jQuery/ — Pranesh Janarthanan, Jun 13 '19 at 11:53

Minko Gechev · Accepted Answer · 2018-03-09T22:27:46.043

243

Your regular expression should look like:

/^(?=.*\d)(?=.*[a-z])(?=.*[A-Z])[0-9a-zA-Z]{8,}$/

Here is an explanation:

/^
  (?=.*\d)          // should contain at least one digit
  (?=.*[a-z])       // should contain at least one lower case
  (?=.*[A-Z])       // should contain at least one upper case
  [a-zA-Z0-9]{8,}   // should contain at least 8 from the mentioned characters
$/

edited Mar 09 '18 at 22:27

answered Feb 13 '13 at 09:56

Minko Gechev

25,304
9
61
68

4

This is not doing what the OP (mistakenly, in my opinion) is asking for. It allows other characters than alphanumerics. – Tim Pietzcker Feb 13 '13 at 09:58
1

Works like a charm! http://www.rubular.com/r/jf69EWPQ4N – Henrik Aasted Sørensen Feb 13 '13 at 10:03
33

(/^(?=.*\d)(?=.*[a-z])(?=.*[A-Z]).{8,}$/) if the user can enter symbols and spaces - allows for a more secure password – Win Jul 30 '15 at 08:30
this will work with html5 form validation right? – SuperUberDuper Sep 20 '17 at 23:06
no validate one letter in Uppercase – stackdave Jan 11 '18 at 17:48
3

I think I am late... But, I don't think it will work when I want to set password with other characters.It will work in _abcItisPass43_ but not in _abcItisPass43&_ . What I am saying is, doesn't work in characters like _$, %, &, #_ and so on. – Biplove Lamichhane Feb 10 '20 at 12:10
testing it with fjd3IR9@*^#!#%^@%# will return to true. – shunz19 May 05 '20 at 14:14

Anthony Grist · Answer 2 · 2013-02-13T10:05:07.913

Using individual regular expressions to test the different parts would be considerably easier than trying to get one single regular expression to cover all of them. It also makes it easier to add or remove validation criteria.

Note, also, that your usage of .filter() was incorrect; it will always return a jQuery object (which is considered truthy in JavaScript). Personally, I'd use an .each() loop to iterate over all of the inputs, and report individual pass/fail statuses. Something like the below:

$(".buttonClick").click(function () {

    $("input[type=text]").each(function () {
        var validated =  true;
        if(this.value.length < 8)
            validated = false;
        if(!/\d/.test(this.value))
            validated = false;
        if(!/[a-z]/.test(this.value))
            validated = false;
        if(!/[A-Z]/.test(this.value))
            validated = false;
        if(/[^0-9a-zA-Z]/.test(this.value))
            validated = false;
        $('div').text(validated ? "pass" : "fail");
        // use DOM traversal to select the correct div for this input above
    });
});

Working demo

It seems you forgot '!' if(!/[^0-9a-zA-Z]/.test(this.value)) — hod caspi, Aug 19 '18 at 12:05
@hodcaspi It's a five and a half year old answer, but no, I definitely didn't. — Anthony Grist, Aug 19 '18 at 18:17

score 10 · Answer 3 · answered Feb 13 '13 at 09:51

10

At least 8 = {8,}:

str.match(/^(?=.*[0-9])(?=.*[a-z])(?=.*[A-Z])([a-zA-Z0-9]{8,})$/)

answered Feb 13 '13 at 09:51

nbrooks

18,126
5
54
66

score 2 · Answer 4 · answered Feb 13 '13 at 09:50

2

Your regex only allows exactly 8 characters. Use {8,} to specify eight or more instead of {8}.

But why would you limit the allowed character range for your passwords? 8-character alphanumeric passwords can be bruteforced by my phone within minutes.

answered Feb 13 '13 at 09:50

Tim Pietzcker

328,213
58
503
561

javascript regex for password containing at least 8 characters, 1 number, 1 upper and 1 lowercase

4 Answers4

Linked

Related