Javascript regex that requires one uppercase letter, one lowercase letter and one number, and allows special

Question

I'm trying to make a regex to check a password field, I want to require at least one uppercase letter, one lower case letter and one number.

I also want to allow the user to use special characters, but I don't want special characters to be a requirement.

Is this possible and if so, what regex should I use?

(That's not what makes a good password: https://tech.dropbox.com/2012/04/zxcvbn-realistic-password-strength-estimation/) — Rudie, Dec 14 '13 at 18:14
Please do a search before posting - this question has been asked and answered many times. e.g. In this case search: "JavaScript Password Validation" — ridgerunner, Dec 14 '13 at 18:39

Firas Dib · Accepted Answer · 2013-12-14T19:44:22.493

7

If you don't want special characters to be a requirement, there is no point validating it.

This regex should do: /^(?=.*[A-Z])(?=.*[a-z])(?=.*\d).*$/

Note that this regex will not validate properly for characters not in the default ascii range of a-zA-Z. So if my password was åäöÅÄÖ1234 it would not be valid for this regex, even though there are upper case and lower case letters.

A possible solution, if this is a requirement, would be to rewrite using unicode properties.

Demo: http://regex101.com/r/uO6jB5

edited Dec 14 '13 at 19:44

answered Dec 14 '13 at 18:08

Firas Dib

2,743
19
38

Thanks for the reply, I'd tried some that did not validate the special characters but seemed to block them, I will try his one and see – Ewan Roycroft Dec 14 '13 at 18:11
Why do you use the `/g`? – Casimir et Hippolyte Dec 14 '13 at 19:26
@CasimiretHippolyte: Don't know, shouldn't be there. Thanks! – Firas Dib Dec 14 '13 at 19:44
I'd say you should not allow Unicode characters in passwords, as normalization issues may make passwords not matching. – ItalyPaleAle Jan 16 '15 at 19:14

score 1 · Answer 2 · answered Dec 14 '13 at 18:08

From this page:

"Password matching expression. Password must be at least 4 characters, no more than 8 characters, and must include at least one upper case letter, one lower case letter, and one numeric digit."

^(?=.*\d)(?=.*[a-z])(?=.*[A-Z]).{4,8}$

(note: you'll want to test this to be sure.)

Javascript regex that requires one uppercase letter, one lowercase letter and one number, and allows special

2 Answers2

Linked