JavaScript password validation regex failing on order of groupings

Question

My password validation criteria is as follows:

Must contain at least two lower case characters
Must contain at least two upper case characters
Must contain at least two numeric characters
Must contain at least two special characters i.e. @#$%
Must be at least 11 characters long

I tried using this for the first four criteria:

/(?:\d{2,})(?:[a-z]{2,})(?:[A-Z]{2,})(?:[!"'#$&()*+-@,.:;<>=?^_`{|}~\/\\]{2,})/g

But it does not match the following string which i would expect it to:

12QAqa@#

But it does match:

12qaQA@#

The order that the validation criteria is not important. How do i rewrite the regex to not take into account the order?

I was hoping to use in the ng-pattern directive for validating input with AngularJS — RyanP13, Nov 11 '15 at 04:34
Possible duplicate of [Regexp Java for password validation](http://stackoverflow.com/questions/3802192/regexp-java-for-password-validation) — Mariano, Nov 11 '15 at 04:43
I KISSed it :) Wrote a custom validator in Angular and simplified the regex into different ones. — RyanP13, Nov 11 '15 at 04:58
@RyanP13: Do share your approach by posting a self-answer and accept it. — nhahtdh, Nov 11 '15 at 07:43

angelcool.net · Accepted Answer · 2015-11-11T16:55:23.593

The following seems to meet all your requirements:

/*
Must contain at least two lower case characters
Must contain at least two upper case characters
Must contain at least two numeric characters
Must contain at least two special characters i.e. @#$%
Must be at least 11 characters long
*/

var password ='12qaQ@#123456789A';
var pattern  =/^(?=(.*[a-z]){2,})(?=(.*[A-Z]){2,})(?=(.*[0-9]){2,})(?=(.*[!@#\$%]){2,}).{11,}$/;

alert( pattern.test(password) );

https://jsfiddle.net/rryg67v1/1/

^                     // start of line
(?=(.*[a-z]){2,})     // look ahead and make sure at least two lower case characters exist
(?=(.*[A-Z]){2,})     // look ahead and make sure at least two upper case characters exist
(?=(.*[0-9]){2,})     // look ahead and make sure at least two numbers exist
(?=(.*[!@#\$%]){2,})  // look ahead and make sure at least two special characters exist
.{11,}                // match at least 11 characters
$                     // end of line

Good luck!!

JavaScript password validation regex failing on order of groupings

1 Answers1